Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

YITH WooCommerce Product Add-Ons — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in YITH WooCommerce Product Add-Ons, with AI-generated Chinese analysis, references, and POCs.

Vendor: YITH

CVE ID Title CVSS Severity Published
CVE-2026-42383 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability CWE-89 7.6 High 2026-05-20
CVE-2023-46635 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability CWE-862 5.3 Medium 2025-01-02
CVE-2024-50448 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-10-28
CVE-2024-47367 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-10-06
CVE-2024-35680 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability CWE-80 5.3 Medium 2024-06-10
CVE-2024-27994 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-03-21
CVE-2023-49777 WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection CWE-502 9.1 Critical 2023-12-31

All 7 known CVE vulnerabilities affecting YITH WooCommerce Product Add-Ons with full Chinese analysis, references, and POCs where available.