Approved changes feed: RSS · Atom

cpe:2.3:a:yith:yith_woocommerce_product_add-ons:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYith (d1f1feac-d98b-51d4-952b-ba17a087dfb8)
ProductYith Woocommerce Product Add Ons (4d0a52b3-4ef6-547c-ac8c-0b436dbb58eb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42383 vulnerable 2026-06-08 08:03:16.275251 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.
Published: 2026-05-20T12:55:50.064Z
Updated: 2026-05-20T15:29:13.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49777 vulnerable 2026-06-08 06:16:10.438487 WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection
CRITICAL (9.1)
Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0.
Published: 2023-12-31T10:11:30.776Z
Updated: 2026-04-28T16:08:57.734Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.