YITH WooCommerce Product Add-Ons

Vulnerabilities 12Slug yith-woocommerce-product-add-onsLatest version 4.29.1WordPress.org →

Minimum safe version

4.14.2

Update to 4.14.2 or later to address 12 fixable vulnerabilities

Latest available4.29.1 ✓

High 7.1

2024-10-28< 4.14.2

CVE-2024-50448

CVE Patchstack Wordfence

High 7.1

2024-10-06< 4.13.1

CVE-2024-47367

CVE Patchstack Wordfence

Medium 5.3

2024-06-10< 4.9.3

CVE-2024-35680

CVE Patchstack Wordfence

High 7.1

2024-03-21< 4.6.0

CVE-2024-27994

CVE Wordfence Patchstack WPScan

Critical 9.1

2024-12-28< 4.3.1

WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection

Patchstack CVE Wordfence WPScan

Medium 5.3

2025-01-02< 4.2.1

CVE-2023-46635

CVE Patchstack Wordfence WPScan

N/A

2022-11-11< 2.16.0

YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery

Wordfence CVE

N/A

2022-11-11< 2.16.0

YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization

Wordfence

N/A

< 2.16.0

WordPress YITH WooCommerce Product Add-Ons Plugin <= 2.15.0 is vulnerable to Cross Site Request Forgery (CSRF)

Patchstack

N/A

< 2.1.0

wpscan.com

WPScan

N/A

< 2.1.0

wpscan.com

WPScan

Medium 4.3

2019-10-31< 1.5.23

CVE-2019-16251

CVE Patchstack Wordfence