CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-10-30
YITH WooCommerce Product Add-Ons Unauthenticated Bypass Vulnerability (CVE-2026-107868)
[Affected Scope] YITH WooCommerce Product Add-Ons plugin versions 4.34.0 and below.
[Impact] Unauthenticated attackers can bypass authorization checks by manipulating user-controlled keys to modify data.
[Mitigation] Immediately update the plugin to version 4.35.0 or later.