Vulnerabilidades em Yith

23 resultados
Análise Vexday

Yith apresenta um perfil de risco baixo com apenas 1 vulnerabilidade registrada, não explorada ativamente e sem severidade crítica. A fraqueza identificada (CWE-269 - Improper Handling of Privileges) é recente, publicada nos últimos 90 dias, exigindo monitoramento para possíveis explorações futuras, mas sem indicativos imediatos de risco elevado.

CVE-2022-45359CRITICALWordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File UploadEPSS 13.5%CVE-2021-36845MEDIUMYITH Maintenance Mode (WordPress plugin) <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesEPSS 0.7%CVE-2023-49777CRITICALWordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object InjectionEPSS 0.7%CVE-2021-36841MEDIUMYITH Maintenance Mode (WordPress plugin) <= 1.3.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability.EPSS 0.6%CVE-2023-36506MEDIUMWordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2026-84238CRITICALWordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2022-44633MEDIUMWordPress YITH WooCommerce Gift Cards Premium plugin <= 3.23.1 - Unauth. Gift Card Creation Leading to Stored XSS vulnerabilityEPSS 0.5%CVE-2026-14359HIGHYITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_userEPSS 0.4%CVE-2024-30470MEDIUMWordPress YITH WooCommerce Account Funds Premium plugin <= 1.32.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-95602MEDIUMWordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.4%CVE-2026-106606HIGHWordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-32552HIGHWordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-27329MEDIUMWordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-42383HIGHWordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-27401MEDIUMWordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-66480MEDIUMWordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-111409MEDIUMWordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-111845MEDIUMWordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-105878MEDIUMWordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-106604MEDIUMWordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%