Advisories · Technology

YITHEMES YITH WooCommerce Ajax Search.

Every CVE that names YITHEMES YITH WooCommerce Ajax Search among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96352 CVE record

CVSS 7.1 High

WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability
- YITHEMES YITH WooCommerce Ajax Search
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2024-47350 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability
- YITHEMES YITH WooCommerce Ajax Search
- SQL injection
Not analysed yet 6 Oct 2024
CVE-2024-4455 CVE record

CVSS 7.2 High

YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting
- yithemes YITH WooCommerce Ajax Search
- Cross-site scripting (XSS)
Not analysed yet 24 May 2024