CVE Tools
Track your stack

Yith Woocommerce Product Add-ons

9 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Yith Woocommerce Product Add-ons, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Yith Woocommerce Product Add-ons CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Yith Woocommerce Product Add-ons CVEs per month
MonthCVEs
2024-110
2024-120
2025-011
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-051
2026-060
2026-070
2026-080
2026-090
2026-101

Severity

How the 9 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical111%
  • High444%
  • Medium444%

Latest CVEs

The 9 most recently published vulnerabilities affecting Yith Woocommerce Product Add-ons.

  1. CVE-2026-66480WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability5.3
  2. CVE-2026-42383WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability7.6
  3. CVE-2023-46635WordPress YITH WooCommerce Product Add-Ons plugin <= 4.2.0 - Broken Access Control vulnerability5.3
  4. CVE-2024-50448WordPress YITH WooCommerce Product Add-Ons plugin <= 4.14.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  5. CVE-2024-47367WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  6. CVE-2024-35680WordPress YITH WooCommerce Product Add-Ons plugin <= 4.9.2 - Content Injection vulnerability5.3
  7. CVE-2024-27994WordPress YITH WooCommerce Product Add-Ons plugin <= 4.5.0 - Cross Site Scripting (XSS) vulnerability7.1
  8. CVE-2023-49777WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection9.1
  9. CVE-2019-16251plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.4.3

Product grouping is registry-driven, with AI assist and human review. How it works