YITH vulnerabilities
We track 5 vulnerabilities in YITH products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.
Latest YITH vulnerabilities
- 7.2 High severity
YITH WooCommerce Affiliates: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0.
- 8.8 High severity
YITH WooCommerce Waitlist Premium: Improper Privilege Management
The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the add_user_in_waiting_list() function registered on the wp_ajax_yith_wcwtl_add_user action being missing
- 7.6 High severity
YITH WooCommerce Product Add-Ons: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.
- 8.8 High severity
YITH WooCommerce Account Funds Premium: Missing Authorization
Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through 1.33.0.
- 8.8 High severity
YITH WooCommerce Product Add-Ons: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0.