Yith Woocommerce Product Add Ons

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-49777 CRITICAL Act Now

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.3.0. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Deserialization WordPress Yith Woocommerce Product Add Ons

NVD

CVSS 3.1

9.1

EPSS

0.4%

CVE-2019-16251 MEDIUM This Month

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure Yith Woocommerce Wishlist Yith Woocommerce Compare +36

NVD

CVSS 3.1

4.3

EPSS

0.9%

CVE-2023-49777

EPSS 0% CVSS 9.1

CRITICAL Act Now

Deserialization WordPress Yith Woocommerce Product Add Ons

NVD

CVE-2019-16251

EPSS 1% CVSS 4.3

MEDIUM This Month

PHP WordPress Information Disclosure +38

NVD