Vulnerabilities / YITH WooCommerce Product Add-Ons
YITH WooCommerce Product Add-Ons vulnerabilities
Advisories WPSec published for YITH WooCommerce Product Add-Ons. Other sources may list more. Its attack surface: YITH WooCommerce Product Add-Ons on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0494 | YITH WooCommerce Product Add-Ons <= 4.34.0 - Unauthenticated Information Exposure of Unpublished Product Prices | Medium 5.3 | 4.34.1 |
| 2026-10-07 | WPSEC-2026-0493 | YITH WooCommerce Product Add-Ons <= 4.34.0 - Authenticated (Shop Manager+) SQL Injection via 's' Parameter | Medium 4.9 | 4.34.1 |
License: CC BY 4.0