Known Plugin Vulnerabilities

Track known vulnerabilities from configured sources. Default view shows all open and closed vulnerabilities, ordered by most recently updated first.

Open Vulnerabilities

36319

Across tracked plugins

Affected Plugins

With open vulnerabilities

Critical / High

Require immediate attention

Vulnerability List

Export CSV

Vulnerability list with plugin score and patch status
Plugin	Slug	Score	Vulnerability	Severity	Affected Versions	Patched	Updated
yith-woocommerce-social-login	yith-woocommerce-social-login	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.4.9		July 1, 2026
yith-woocommerce-request-a-quote	yith-woocommerce-request-a-quote	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.15.0	2.15.1	July 1, 2026
yith-woocommerce-request-a-quote	yith-woocommerce-request-a-quote	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.15.0	2.15.1	July 1, 2026
yith-woocommerce-quick-view	yith-woocommerce-quick-view	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.21.0	1.21.1	July 1, 2026
yith-woocommerce-quick-view	yith-woocommerce-quick-view	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.21.0	1.21.1	July 1, 2026
yith-woocommerce-questions-and-answers	yith-woocommerce-questions-and-answers	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.5.0		July 1, 2026
yith-woocommerce-questions-and-answers	yith-woocommerce-questions-and-answers	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.5.0		July 1, 2026
yith-woocommerce-product-vendors	yith-woocommerce-product-vendors	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-3.9.0		July 1, 2026
yith-woocommerce-product-vendors	yith-woocommerce-product-vendors	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-3.9.0		July 1, 2026
yith-woocommerce-product-slider-carousel	yith-woocommerce-product-slider-carousel	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.16.0	1.16.1	July 1, 2026
yith-woocommerce-product-slider-carousel	yith-woocommerce-product-slider-carousel	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.16.0	1.16.1	July 1, 2026
yith-woocommerce-product-bundles	yith-woocommerce-product-bundles	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.16.0	1.17.0	July 1, 2026
yith-woocommerce-product-bundles	yith-woocommerce-product-bundles	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.16.0	1.17.0	July 1, 2026
yith-woocommerce-product-add-ons	yith-woocommerce-product-add-ons	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.15.0	2.16.0	July 1, 2026
yith-woocommerce-product-add-ons	yith-woocommerce-product-add-ons	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.15.0	2.16.0	July 1, 2026
yith-woocommerce-popup	yith-woocommerce-popup	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.21.0	1.21.1	July 1, 2026
yith-woocommerce-popup	yith-woocommerce-popup	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.21.0	1.21.1	July 1, 2026
yith-woocommerce-points-and-rewards	yith-woocommerce-points-and-rewards	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.6.1		July 1, 2026
yith-woocommerce-points-and-rewards	yith-woocommerce-points-and-rewards	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.6.1		July 1, 2026
yith-woocommerce-pdf-invoice	yith-woocommerce-pdf-invoice	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.3.0		July 1, 2026
yith-woocommerce-pdf-invoice	yith-woocommerce-pdf-invoice	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.3.0		July 1, 2026
yith-woocommerce-order-tracking	yith-woocommerce-order-tracking	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.7.0	2.8.0	July 1, 2026
yith-woocommerce-order-tracking	yith-woocommerce-order-tracking	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.7.0	2.8.0	July 1, 2026
yith-woocommerce-name-your-price	yith-woocommerce-name-your-price	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.3.0		July 1, 2026
yith-woocommerce-name-your-price	yith-woocommerce-name-your-price	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.3.0		July 1, 2026
yith-woocommerce-multi-step-checkout	yith-woocommerce-multi-step-checkout	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.0.5		July 1, 2026
yith-woocommerce-multi-step-checkout	yith-woocommerce-multi-step-checkout	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.0.5		July 1, 2026
yith-woocommerce-mailchimp	yith-woocommerce-mailchimp	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.5.0		July 1, 2026
yith-woocommerce-mailchimp	yith-woocommerce-mailchimp	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.5.0		July 1, 2026
yith-woocommerce-gift-cards	yith-woocommerce-gift-cards	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.14.0	2.15.0	July 1, 2026
yith-woocommerce-gift-cards	yith-woocommerce-gift-cards	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.14.0	2.15.0	July 1, 2026
yith-woocommerce-frequently-bought-together	yith-woocommerce-frequently-bought-together	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.18.0	1.19.1	July 1, 2026
yith-woocommerce-frequently-bought-together	yith-woocommerce-frequently-bought-together	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.18.0	1.19.1	July 1, 2026
yith-woocommerce-featured-video	yith-woocommerce-featured-video	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.18.0	1.18.1	July 1, 2026
yith-woocommerce-featured-video	yith-woocommerce-featured-video	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.18.0	1.18.1	July 1, 2026
yith-woocommerce-compare	yith-woocommerce-compare	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.20.0	2.20.1	July 1, 2026
yith-woocommerce-compare	yith-woocommerce-compare	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.20.0	2.20.1	July 1, 2026
yith-woocommerce-category-accordion	yith-woocommerce-category-accordion	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.6.0		July 1, 2026
yith-woocommerce-category-accordion	yith-woocommerce-category-accordion	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.6.0		July 1, 2026
yith-woocommerce-catalog-mode	yith-woocommerce-catalog-mode	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.16.0	2.16.1	July 1, 2026
yith-woocommerce-catalog-mode	yith-woocommerce-catalog-mode	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.16.0	2.16.1	July 1, 2026
yith-woocommerce-cart-messages	yith-woocommerce-cart-messages	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.8.0		July 1, 2026
yith-woocommerce-cart-messages	yith-woocommerce-cart-messages	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.8.0		July 1, 2026
yith-woocommerce-bulk-product-editing	yith-woocommerce-bulk-product-editing	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.2.27		July 1, 2026
yith-woocommerce-bulk-product-editing	yith-woocommerce-bulk-product-editing	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.2.27		July 1, 2026
yith-woocommerce-brands-add-on	yith-woocommerce-brands-add-on	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.5.0	2.6.0	July 1, 2026
yith-woocommerce-brands-add-on	yith-woocommerce-brands-add-on	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.5.0	2.6.0	July 1, 2026
yith-woocommerce-badges-management	yith-woocommerce-badges-management	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.10.0	2.11.0	July 1, 2026
yith-woocommerce-badges-management	yith-woocommerce-badges-management	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.10.0	2.11.0	July 1, 2026
yith-woocommerce-authorizenet-payment-gateway	yith-woocommerce-authorizenet-payment-gateway	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.2.6		July 1, 2026
yith-woocommerce-authorizenet-payment-gateway	yith-woocommerce-authorizenet-payment-gateway	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.2.6		July 1, 2026
yith-woocommerce-ajax-search	yith-woocommerce-ajax-search	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.25.0	1.25.1	July 1, 2026
yith-woocommerce-ajax-search	yith-woocommerce-ajax-search	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.25.0	1.25.1	July 1, 2026
yith-woocommerce-ajax-navigation	yith-woocommerce-ajax-navigation	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-4.15.0	4.16.0	July 1, 2026
yith-woocommerce-ajax-navigation	yith-woocommerce-ajax-navigation	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-4.15.0	4.16.0	July 1, 2026
yith-woocommerce-affiliates	yith-woocommerce-affiliates	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.7.0	2.8.0	July 1, 2026
yith-woocommerce-affiliates	yith-woocommerce-affiliates	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.7.0	2.8.0	July 1, 2026
yith-woocommerce-advanced-reviews	yith-woocommerce-advanced-reviews	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.7.0		July 1, 2026
yith-woocommerce-advanced-reviews	yith-woocommerce-advanced-reviews	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.7.0		July 1, 2026
yith-woocommerce-added-to-cart-popup	yith-woocommerce-added-to-cart-popup	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.8.0		July 1, 2026
yith-woocommerce-added-to-cart-popup	yith-woocommerce-added-to-cart-popup	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.8.0		July 1, 2026
yith-pre-order-for-woocommerce	yith-pre-order-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.5.0	2.6.0	July 1, 2026
yith-pre-order-for-woocommerce	yith-pre-order-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.5.0	2.6.0	July 1, 2026
yith-paypal-payments-for-woocommerce	yith-paypal-payments-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.3.1		July 1, 2026
yith-paypal-payments-for-woocommerce	yith-paypal-payments-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.3.1		July 1, 2026
yith-paypal-express-checkout-for-woocommerce	yith-paypal-express-checkout-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.20.0	1.20.1	July 1, 2026
yith-paypal-express-checkout-for-woocommerce	yith-paypal-express-checkout-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.20.0	1.20.1	July 1, 2026
yith-infinite-scrolling	yith-infinite-scrolling	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.7.0	1.8.0	July 1, 2026
yith-infinite-scrolling	yith-infinite-scrolling	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.7.0	1.8.0	July 1, 2026
YITH Essential Kit for WooCommerce #1	yith-essential-kit-for-woocommerce-1	94	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-2.13.0	2.14.0	July 1, 2026
YITH Essential Kit for WooCommerce #1	yith-essential-kit-for-woocommerce-1	94	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-2.13.0	2.14.0	July 1, 2026
yith-donations-for-woocommerce	yith-donations-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.3.0		July 1, 2026
yith-donations-for-woocommerce	yith-donations-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.3.0		July 1, 2026
yith-custom-thank-you-page-for-woocommerce	yith-custom-thank-you-page-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.9.0		July 1, 2026
yith-custom-thank-you-page-for-woocommerce	yith-custom-thank-you-page-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.9.0		July 1, 2026
yith-color-and-label-variations-for-woocommerce	yith-color-and-label-variations-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	LOW	*-1.25.0	1.25.1	July 1, 2026
yith-color-and-label-variations-for-woocommerce	yith-color-and-label-variations-for-woocommerce	N/A	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	LOW	*-1.25.0	1.25.1	July 1, 2026
postmagthemes-demo-import	postmagthemes-demo-import	N/A	PostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload	LOW	*-1.0.7	1.0.8	July 1, 2026
jwt-auth	jwt-auth	93	Firebase PHP-JWT < 6.0.0 - Algorithm Confusion	LOW	*-2.1.0	2.1.1	July 1, 2026
chameleon	chameleon	93	Chameleon <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting	LOW	*-1.4.3	1.4.4	July 1, 2026
Broken Link Checker	broken-link-checker	68	Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting	LOW	*-1.11.19	1.11.20	July 1, 2026
AdRotate Banner Manager	adrotate	74	AdRotate Banner Manager <= 5.9 - Cross-Site Request Forgery	LOW	*-5.9	5.9.1	July 1, 2026
add-multiple-marker	add-multiple-marker	97	Add Multiple Marker <= 1.2 - Cross-Site Request Forgery	LOW	*-1.2	1.3	July 1, 2026
add-multiple-marker	add-multiple-marker	97	Add Multiple Marker <= 1.2 - Missing Authorization Checks to Settings Update	LOW	*-1.2	1.3	July 1, 2026
activity-reactions-for-buddypress	activity-reactions-for-buddypress	93	Activity Reactions For Buddypress <= 1.0.22 - Cross-Site Request Forgery	LOW	*-1.0.22		July 1, 2026
activity-reactions-for-buddypress	activity-reactions-for-buddypress	93	Activity Reactions For Buddypress <= 1.0.22 - Missing Authorization	LOW	*-1.0.22		July 1, 2026
wpupper-share-buttons	wpupper-share-buttons	N/A	WPUpper Share Buttons <= 3.42 - Authenticated (Admin+) Stored Cross-Site Scripting	LOW	*-3.42	3.43	July 1, 2026
wp-pagebuilder	wp-pagebuilder	N/A	WP Page Builder <= 1.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting	LOW	*-1.2.8		July 1, 2026
uji-countdown	uji-countdown	N/A	Uji Countdown <= 2.3 - Authenticated (Admin+) Stored Cross-Site Scripting	LOW	*-2.3	2.3.1	July 1, 2026
oauth2-provider	oauth2-provider	N/A	WP OAuth Server (OAuth Authentication) <= 4.2.5 - Cross-Site Request Forgery	LOW	*-4.2.5	4.3.0	July 1, 2026
import-shopify-to-woocommerce	import-shopify-to-woocommerce	93	S2W – Import Shopify to WooCommerce <= 1.1.12 - Authenticated (Admin+) Local File Inclusion	LOW	*-1.1.12	1.1.13	July 1, 2026
clerkio	clerkio	93	Clerk <= 3.8.2 - Authorization Bypass via Insufficient Validation	LOW	*-3.8.2	3.8.3	July 1, 2026
advanced-wp-columns	advanced-wp-columns	95	Advanced WP Columns <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting	LOW	*-2.0.6		July 1, 2026
add-comments	add-comments	95	Add Comments <= 1.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting	LOW	*-1.0.1		July 1, 2026
wpforo	wpforo	N/A	wpForo Forum <= 2.0.9 - Authenticated (Subscriber+) Arbitrary File Upload	LOW	*-2.0.9	2.1.0	July 1, 2026
wpforo	wpforo	N/A	wpForo Forum <= 2.0.9 - Cross-Site Request Forgery	LOW	*-2.0.9	2.1.0	July 1, 2026
wp-rest-api-authentication	wp-rest-api-authentication	N/A	WordPress REST API Authentication <= 2.4.0 - Cross-Site Request Forgery	LOW	*-2.4.0	2.4.1	July 1, 2026
wp-csv-exporter	wp-csv-exporter	N/A	WP CSV Exporter <= 1.3.6 - Authenticated (Admin+) SQL Injection	LOW	*-1.3.6	1.3.7	July 1, 2026
user-blocker	user-blocker	N/A	User Blocker <= 1.5.5 - Authenticated (Admin+) CSV Injection	LOW	*-1.5.5	1.5.6	July 1, 2026
sitepress-multilingual-cms	sitepress-multilingual-cms	N/A	WPML <= 4.5.10 - Missing Authorization to Translation Job Status Change	LOW	*-4.5.10	4.5.11	July 1, 2026

LOW

yith-woocommerce-social-login

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.4.9 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-request-a-quote

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.15.0 Patched: 2.15.1 Updated: July 1, 2026

LOW

yith-woocommerce-request-a-quote

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.15.0 Patched: 2.15.1 Updated: July 1, 2026

LOW

yith-woocommerce-quick-view

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.21.0 Patched: 1.21.1 Updated: July 1, 2026

LOW

yith-woocommerce-quick-view

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.21.0 Patched: 1.21.1 Updated: July 1, 2026

LOW

yith-woocommerce-questions-and-answers

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.5.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-questions-and-answers

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.5.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-product-vendors

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-3.9.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-product-vendors

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-3.9.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-product-slider-carousel

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.16.0 Patched: 1.16.1 Updated: July 1, 2026

LOW

yith-woocommerce-product-slider-carousel

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.16.0 Patched: 1.16.1 Updated: July 1, 2026

LOW

yith-woocommerce-product-bundles

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.16.0 Patched: 1.17.0 Updated: July 1, 2026

LOW

yith-woocommerce-product-bundles

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.16.0 Patched: 1.17.0 Updated: July 1, 2026

LOW

yith-woocommerce-product-add-ons

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.15.0 Patched: 2.16.0 Updated: July 1, 2026

LOW

yith-woocommerce-product-add-ons

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.15.0 Patched: 2.16.0 Updated: July 1, 2026

LOW

yith-woocommerce-popup

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.21.0 Patched: 1.21.1 Updated: July 1, 2026

LOW

yith-woocommerce-popup

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.21.0 Patched: 1.21.1 Updated: July 1, 2026

LOW

yith-woocommerce-points-and-rewards

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.6.1 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-points-and-rewards

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.6.1 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-pdf-invoice

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.3.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-pdf-invoice

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.3.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-order-tracking

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.7.0 Patched: 2.8.0 Updated: July 1, 2026

LOW

yith-woocommerce-order-tracking

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.7.0 Patched: 2.8.0 Updated: July 1, 2026

LOW

yith-woocommerce-name-your-price

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.3.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-name-your-price

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.3.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-multi-step-checkout

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.0.5 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-multi-step-checkout

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.0.5 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-mailchimp

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.5.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-mailchimp

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.5.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-gift-cards

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.14.0 Patched: 2.15.0 Updated: July 1, 2026

LOW

yith-woocommerce-gift-cards

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.14.0 Patched: 2.15.0 Updated: July 1, 2026

LOW

yith-woocommerce-frequently-bought-together

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.18.0 Patched: 1.19.1 Updated: July 1, 2026

LOW

yith-woocommerce-frequently-bought-together

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.18.0 Patched: 1.19.1 Updated: July 1, 2026

LOW

yith-woocommerce-featured-video

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.18.0 Patched: 1.18.1 Updated: July 1, 2026

LOW

yith-woocommerce-featured-video

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.18.0 Patched: 1.18.1 Updated: July 1, 2026

LOW

yith-woocommerce-compare

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.20.0 Patched: 2.20.1 Updated: July 1, 2026

LOW

yith-woocommerce-compare

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.20.0 Patched: 2.20.1 Updated: July 1, 2026

LOW

yith-woocommerce-category-accordion

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.6.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-category-accordion

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.6.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-catalog-mode

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.16.0 Patched: 2.16.1 Updated: July 1, 2026

LOW

yith-woocommerce-catalog-mode

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.16.0 Patched: 2.16.1 Updated: July 1, 2026

LOW

yith-woocommerce-cart-messages

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.8.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-cart-messages

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.8.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-bulk-product-editing

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.2.27 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-bulk-product-editing

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.2.27 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-brands-add-on

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.5.0 Patched: 2.6.0 Updated: July 1, 2026

LOW

yith-woocommerce-brands-add-on

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.5.0 Patched: 2.6.0 Updated: July 1, 2026

LOW

yith-woocommerce-badges-management

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.10.0 Patched: 2.11.0 Updated: July 1, 2026

LOW

yith-woocommerce-badges-management

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.10.0 Patched: 2.11.0 Updated: July 1, 2026

LOW

yith-woocommerce-authorizenet-payment-gateway

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.2.6 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-authorizenet-payment-gateway

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.2.6 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-ajax-search

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.25.0 Patched: 1.25.1 Updated: July 1, 2026

LOW

yith-woocommerce-ajax-search

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.25.0 Patched: 1.25.1 Updated: July 1, 2026

LOW

yith-woocommerce-ajax-navigation

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-4.15.0 Patched: 4.16.0 Updated: July 1, 2026

LOW

yith-woocommerce-ajax-navigation

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-4.15.0 Patched: 4.16.0 Updated: July 1, 2026

LOW

yith-woocommerce-affiliates

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.7.0 Patched: 2.8.0 Updated: July 1, 2026

LOW

yith-woocommerce-affiliates

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.7.0 Patched: 2.8.0 Updated: July 1, 2026

LOW

yith-woocommerce-advanced-reviews

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.7.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-advanced-reviews

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.7.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-added-to-cart-popup

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.8.0 Patched: Updated: July 1, 2026

LOW

yith-woocommerce-added-to-cart-popup

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.8.0 Patched: Updated: July 1, 2026

LOW

yith-pre-order-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.5.0 Patched: 2.6.0 Updated: July 1, 2026

LOW

yith-pre-order-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.5.0 Patched: 2.6.0 Updated: July 1, 2026

LOW

yith-paypal-payments-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.3.1 Patched: Updated: July 1, 2026

LOW

yith-paypal-payments-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.3.1 Patched: Updated: July 1, 2026

LOW

yith-paypal-express-checkout-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.20.0 Patched: 1.20.1 Updated: July 1, 2026

LOW

yith-paypal-express-checkout-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.20.0 Patched: 1.20.1 Updated: July 1, 2026

LOW

yith-infinite-scrolling

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.7.0 Patched: 1.8.0 Updated: July 1, 2026

LOW

yith-infinite-scrolling

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.7.0 Patched: 1.8.0 Updated: July 1, 2026

LOW

YITH Essential Kit for WooCommerce #1

yith-essential-kit-for-woocommerce-1

Score: 94/100 YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-2.13.0 Patched: 2.14.0 Updated: July 1, 2026

LOW

YITH Essential Kit for WooCommerce #1

yith-essential-kit-for-woocommerce-1

Score: 94/100 YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-2.13.0 Patched: 2.14.0 Updated: July 1, 2026

LOW

yith-donations-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.3.0 Patched: Updated: July 1, 2026

LOW

yith-donations-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.3.0 Patched: Updated: July 1, 2026

LOW

yith-custom-thank-you-page-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.9.0 Patched: Updated: July 1, 2026

LOW

yith-custom-thank-you-page-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.9.0 Patched: Updated: July 1, 2026

LOW

yith-color-and-label-variations-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization Affected: *-1.25.0 Patched: 1.25.1 Updated: July 1, 2026

LOW

yith-color-and-label-variations-for-woocommerce

Score: N/A YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery Affected: *-1.25.0 Patched: 1.25.1 Updated: July 1, 2026

LOW

postmagthemes-demo-import

Score: N/A PostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload Affected: *-1.0.7 Patched: 1.0.8 Updated: July 1, 2026

LOW

jwt-auth

Score: 93/100 Firebase PHP-JWT < 6.0.0 - Algorithm Confusion Affected: *-2.1.0 Patched: 2.1.1 Updated: July 1, 2026

LOW

chameleon

Score: 93/100 Chameleon <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: *-1.4.3 Patched: 1.4.4 Updated: July 1, 2026

LOW

Broken Link Checker

broken-link-checker

Score: 68/100 Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: *-1.11.19 Patched: 1.11.20 Updated: July 1, 2026

LOW

AdRotate Banner Manager

adrotate

Score: 74/100 AdRotate Banner Manager <= 5.9 - Cross-Site Request Forgery Affected: *-5.9 Patched: 5.9.1 Updated: July 1, 2026

LOW

add-multiple-marker

Score: 97/100 Add Multiple Marker <= 1.2 - Cross-Site Request Forgery Affected: *-1.2 Patched: 1.3 Updated: July 1, 2026

LOW

add-multiple-marker

Score: 97/100 Add Multiple Marker <= 1.2 - Missing Authorization Checks to Settings Update Affected: *-1.2 Patched: 1.3 Updated: July 1, 2026

LOW

activity-reactions-for-buddypress

Score: 93/100 Activity Reactions For Buddypress <= 1.0.22 - Cross-Site Request Forgery Affected: *-1.0.22 Patched: Updated: July 1, 2026

LOW

activity-reactions-for-buddypress

Score: 93/100 Activity Reactions For Buddypress <= 1.0.22 - Missing Authorization Affected: *-1.0.22 Patched: Updated: July 1, 2026

LOW

wpupper-share-buttons

Score: N/A WPUpper Share Buttons <= 3.42 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: *-3.42 Patched: 3.43 Updated: July 1, 2026

LOW

wp-pagebuilder

Score: N/A WP Page Builder <= 1.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: *-1.2.8 Patched: Updated: July 1, 2026

LOW

uji-countdown

Score: N/A Uji Countdown <= 2.3 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: *-2.3 Patched: 2.3.1 Updated: July 1, 2026

LOW

oauth2-provider

Score: N/A WP OAuth Server (OAuth Authentication) <= 4.2.5 - Cross-Site Request Forgery Affected: *-4.2.5 Patched: 4.3.0 Updated: July 1, 2026

LOW

import-shopify-to-woocommerce

Score: 93/100 S2W – Import Shopify to WooCommerce <= 1.1.12 - Authenticated (Admin+) Local File Inclusion Affected: *-1.1.12 Patched: 1.1.13 Updated: July 1, 2026

LOW

clerkio

Score: 93/100 Clerk <= 3.8.2 - Authorization Bypass via Insufficient Validation Affected: *-3.8.2 Patched: 3.8.3 Updated: July 1, 2026

LOW

advanced-wp-columns

Score: 95/100 Advanced WP Columns <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: *-2.0.6 Patched: Updated: July 1, 2026

LOW

add-comments

Score: 95/100 Add Comments <= 1.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: *-1.0.1 Patched: Updated: July 1, 2026

LOW

wpforo

Score: N/A wpForo Forum <= 2.0.9 - Authenticated (Subscriber+) Arbitrary File Upload Affected: *-2.0.9 Patched: 2.1.0 Updated: July 1, 2026

LOW

wpforo

Score: N/A wpForo Forum <= 2.0.9 - Cross-Site Request Forgery Affected: *-2.0.9 Patched: 2.1.0 Updated: July 1, 2026

LOW

wp-rest-api-authentication

Score: N/A WordPress REST API Authentication <= 2.4.0 - Cross-Site Request Forgery Affected: *-2.4.0 Patched: 2.4.1 Updated: July 1, 2026

LOW

wp-csv-exporter

Score: N/A WP CSV Exporter <= 1.3.6 - Authenticated (Admin+) SQL Injection Affected: *-1.3.6 Patched: 1.3.7 Updated: July 1, 2026

LOW

user-blocker

Score: N/A User Blocker <= 1.5.5 - Authenticated (Admin+) CSV Injection Affected: *-1.5.5 Patched: 1.5.6 Updated: July 1, 2026

LOW

sitepress-multilingual-cms

Score: N/A WPML <= 4.5.10 - Missing Authorization to Translation Job Status Change Affected: *-4.5.10 Patched: 4.5.11 Updated: July 1, 2026

Showing 27701 to 27800 of 36319 results

Download: CSV JSON

Important: Review Required

Vulnerability data is aggregated from automated feeds and public sources. Results may include false positives or outdated information. Always verify details and apply updates in a staging environment before deploying to production.

Data updated daily from trusted sources. Last updated: July 1, 2026 at 09:32 UTC.

Known Plugin Vulnerabilities

Open Vulnerabilities

Affected Plugins

Critical / High

Recently Updated

Vulnerability List