Skip to content
OpenAdvisories

Vendor

YITHEMES

28 known vulnerabilities.

Products

YITH WooCommerce Product Add-Ons 6 YITH WooCommerce Wishlist 4 YITH WooCommerce Ajax Search 3 YITH WooCommerce Tab Manager 2 YITH Custom Login 2 YITH WooCommerce Compare 2 YITH WooCommerce Quick View 1 YITH WooCommerce Ajax Product Filter 1 YITH WooCommerce Zoom Magnifier 1 YITH WooCommerce Request A Quote 1 YITH WooCommerce Gift Cards 1 YITH WooCommerce Popup 1 YITH PayPal Express Checkout for WooCommerce 1 YITH Slider for page builders 1 YITH Essential Kit for WooCommerce #1 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2026-96352

    WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.

    YITHEMES YITH WooCommerce Ajax Search Web / CMS
  • High 7.2
    CVE-2026-22333

    WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability

    Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: from n/a through <= 3.6.0.

    YITHEMES YITH WooCommerce Compare Web / CMS
  • High 7.1
    CVE-2024-50448

    WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.14.1.

    YITHEMES YITH WooCommerce Product Add-Ons Web / CMS
  • High 7.1
    CVE-2024-47367

    WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a…

    YITHEMES YITH WooCommerce Product Add-Ons Web / CMS
  • High 7.2
    CVE-2024-4455 Scanner template

    YITH WooCommerce Ajax Search <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting

    The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘item’ parameter in versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthen…

    YITHEMES YITH WooCommerce Ajax Search Web / CMS
  • High 7.1
    CVE-2024-27994

    WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.5.0.

    YITHEMES YITH WooCommerce Product Add-Ons Web / CMS