Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-125833 EUVD-2026-125285GHSA-mvc4-cj72-x4w5

WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.24.0 - Cross Site Scripting (XSS) vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Ajax Product Filter yith-woocommerce-ajax-navigation allows Stored XSS.This issue affects YITH WooCommerce Ajax Product Filter: from n/a through 5.24.0.

Affected products

VendorProductAffectedFixed
YITH YITH WooCommerce Ajax Product Filter ≤ 5.24.0 —

References