Yithemes vulnerabilities
We track 6 vulnerabilities in Yithemes products across 6 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on February 19, 2026.
Latest Yithemes vulnerabilities
- 7.2 High severity
YITH WooCommerce Compare: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: from n/a through <= 3.6.0.
- 9.3 Critical severity
YITH WooCommerce Ajax Search: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITHEMES YITH WooCommerce Ajax Search yith-woocommerce-ajax-search.This issue affects YITH WooCommerce Ajax Search: from n/a through <= 2.8.0.
- 7.1 High severity
YITH WooCommerce Product Add-Ons: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a
- 7.3 High severity
WooCommerce - Social Login: Authentication Bypass by Primary Weakness
The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to, and including, 2.7.3. This is due to a lack of brute force controls on a weak one-time password. This makes it possible for unauthe
- 8.8 High severity
YITH WooCommerce Account Funds Premium: Missing Authorization
Missing Authorization vulnerability in YITH YITH WooCommerce Account Funds Premium.This issue affects YITH WooCommerce Account Funds Premium: from n/a through 1.33.0.
- 7.1 High severity
YITH WooCommerce Product Add-Ons: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through <= 4.5.0.