Medium · 4.6 CVE-2022-44630 EUVD-2022-56004GHSA-v266-68w3-wq36

WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF)

Published Jun 11, 2026 · Updated Jun 11, 2026 · Assigned by Patchstack

Description

Cross-Site request forgery (CSRF) vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery.

This issue affects YITH WooCommerce Product Slider Carousel: from n/a through 1.16.0.

Vendor	Product	Affected	Fixed
YITH	YITH WooCommerce Product Slider Carousel	≤ 1.16.0	—