Vulnerabilities (CVE)

Filtered by vendor Yithemes Subscribe
Filtered by product Yith Woocommerce Product Add-ons
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-35680 1 Yithemes 1 Yith Woocommerce Product Add-ons 2024-06-12 N/A 5.3 MEDIUM
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Code Injection.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.9.2.
CVE-2019-16251 1 Yithemes 38 Yith Advanced Refund System For Woocommerce, Yith Color And Label Variations For Woocommerce, Yith Custom Thank You Page For Woocommerce and 35 more 2024-02-04 4.0 MEDIUM 4.3 MEDIUM
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.