Advisories · Technology

YITHEMES YITH PayPal Express Checkout for WooCommerce.

Every CVE that names YITHEMES YITH PayPal Express Checkout for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48111 CVE record

CVSS 4.3 Medium

WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.49.0 - Cross Site Request Forgery (CSRF) vulnerability
- YITHEMES YITH PayPal Express Checkout for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 17 Jun 2025