Medium · 5.3 CVE-2026-121779 EUVD-2026-119001GHSA-p324-24fv-h86p

WordPress YITH WooCommerce Subscription plugin <= 4.22.0 - Sensitive Data Exposure vulnerability

Published Nov 7, 2026 · Updated Nov 7, 2026 · Assigned by Patchstack

Vendor: Yith Product: YITH WooCommerce Subscription Category: Web / CMS

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Subscription yith-woocommerce-subscription allows Retrieve Embedded Sensitive Data.This issue affects YITH WooCommerce Subscription: from n/a through 4.22.0.

Affected products

Vendor	Product	Affected	Fixed
YITH	YITH WooCommerce Subscription	≤ 4.22.0	—

References

https://patchstack.com/database/wordpress/plugin/yith-woocommerce-subscription/vulnerability/wordpress-yith-woocommerce-subscription-plugin-4-22-0-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry