Y
Vendor security profile
YITH
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
1
3
CVE KEV
CVE severity distribution
5toplam CVE
High2 (40%)
Medium3 (60%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
5.3
CVE-2026-66480
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability
Y
Patch status unknownEPSS %0
7.2
CVE-2026-106606
WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability
Y
Patch status unknownEPSS %0
5.3
CVE-2026-105878
WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability
Y
Patch status unknownEPSS %0
6.5
CVE-2026-97292
WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability
Y
Patch status unknownEPSS %0
7.1
CVE-2026-96352
WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability
Y
Patch status unknownEPSS %0
6.5
CVE-2026-95602
WordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerability
Y
Patch status unknownEPSS %0
8.5
CVE-2026-32552
WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability
Y
Patch status unknownEPSS %0
5.3
CVE-2026-28169
WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability
Y
Patch status unknownEPSS %0