CVE-2026-121779mediumCWE-497

CVE-2026-121779: medium-severity vulnerability in YITH WooCommerce Subscription

WordPress YITH WooCommerce Subscription plugin <= 4.22.0 - Sensitive Data Exposure vulnerability

Published 07 Nov 2026

Follow this CVE + Monitor YITH WooCommerce Subscription

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Subscription yith-woocommerce-subscription allows Retrieve Embedded Sensitive Data.This issue affects YITH WooCommerce Subscription: from n/a through 4.22.0.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

YITH · YITH WooCommerce Subscription

References

https://patchstack.com/database/wordpress/plugin/yith-woocommerce-subscription/vulnerability/wordpress-yith-woocommerce-subscription-plugin-4-22-0-sensitive-data-exposure-vulnerability?_s_id=cve