{
 "id": "WPSEC-2026-3061",
 "url": "https://wpsec.com/vuln/WPSEC-2026-3061/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-3061/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-3061/index.md",
 "title": "YITH WooCommerce Product Add-Ons <= 4.35.0 - Unauthenticated Limited File Upload",
 "description": "The YITH WooCommerce Product Add-Ons plugin for WordPress is vulnerable to unauthorized file uploads in all versions up to, and including, 4.35.0. This is due to the file upload AJAX action being registered for unauthenticated users with no capability check, while accepting any file type WordPress allows by default. This makes it possible for unauthenticated attackers to upload files of those types, such as images and documents, to the server's uploads directory.",
 "plugin": {
  "slug": "yith-woocommerce-product-add-ons",
  "name": "YITH WooCommerce Product Add-Ons",
  "full_name": "YITH WooCommerce Product Add-Ons",
  "wordpress_org": "https://wordpress.org/plugins/yith-woocommerce-product-add-ons/",
  "advisories_url": "https://wpsec.com/vuln/plugin/yith-woocommerce-product-add-ons/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/yith-woocommerce-product-add-ons"
 },
 "type": "UPLOAD",
 "cwe": [
  "CWE-434"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "4.35.1",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 4.35.1"
  ]
 },
 "introduced_in": null,
 "fixed_in": "4.35.1",
 "remediation": "Update to 4.35.1 or later.",
 "fix_released": "2026-11-12T12:49:10+00:00",
 "published": "2026-11-13T13:41:21+00:00",
 "updated": "2026-11-12T17:15:54.990773+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-3061/",
  "https://plugins.svn.wordpress.org/yith-woocommerce-product-add-ons/tags/4.35.1/",
  "https://wordpress.org/plugins/yith-woocommerce-product-add-ons/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/yith-woocommerce-product-add-ons",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-13"
 }
}