4.3

CVE-2019-16251

YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
Mögliche Gegenmaßnahme
YITH Advanced Refund System for WooCommerce: Update to version 1.0.12, or a newer patched version
YITH Color and Label Variations for WooCommerce: Update to version 1.8.13, or a newer patched version
YITH Custom Thank You Page for WooCommerce: Update to version 1.1.8, or a newer patched version
YITH Desktop Notifications for WooCommerce: Update to version 1.2.8, or a newer patched version
YITH PayPal Express Checkout for WooCommerce: Update to version 1.2.6, or a newer patched version
YITH Pre-Order for WooCommerce: Update to version 1.2.1, or a newer patched version
YITH Product Size Charts for WooCommerce: Update to version 1.1.13, or a newer patched version
YITH WooCommerce Added to Cart Popup: Update to version 1.3.13, or a newer patched version
YITH WooCommerce Advanced Reviews: Update to version 1.4.0, or a newer patched version
YITH WooCommerce Affiliates: Update to version 1.6.3, or a newer patched version
YITH WooCommerce Ajax Search: Update to version 1.7.1, or a newer patched version
YITH WooCommerce Authorize.net Payment Gateway: Update to version 1.1.13, or a newer patched version
YITH WooCommerce Badge Management: Update to version 1.3.20, or a newer patched version
YITH WooCommerce Best Sellers: Update to version 1.1.13, or a newer patched version
YITH WooCommerce Brands Add-On: Update to version 1.3.7, or a newer patched version
YITH WooCommerce Bulk Product Editing: Update to version 1.2.14, or a newer patched version
YITH WooCommerce Cart Messages: Update to version 1.4.5, or a newer patched version
YITH WooCommerce Compare: Update to version 2.3.15, or a newer patched version
YITH Frequently Bought Together for WooCommerce: Update to version 1.2.11, or a newer patched version
YITH WooCommerce Gift Cards: Update to version 1.3.8, or a newer patched version
YITH WooCommerce Mailchimp: Update to version 2.1.4, or a newer patched version
YITH WooCommerce Multi-step Checkout: Update to version 1.7.5, or a newer patched version
YITH WooCommerce Order & Shipment Tracking: Update to version 1.2.11, or a newer patched version
YITH WooCommerce PDF Invoice and Shipping List: Update to version 1.2.13, or a newer patched version
YITH WooCommerce Points and Rewards: Update to version 1.3.6, or a newer patched version
YITH WooCommerce Product Add-Ons: Update to version 1.5.23, or a newer patched version
YITH WooCommerce Product Bundles: Update to version 1.1.17, or a newer patched version
YITH WooCommerce Multi Vendor: Update to version 3.4.1, or a newer patched version
YITH WooCommerce Questions and Answers: Update to version 1.2.0, or a newer patched version
YITH WooCommerce Quick View: Update to version 1.3.15, or a newer patched version
YITH WooCommerce Recover Abandoned Cart: Update to version 1.3.4, or a newer patched version
YITH Request a Quote for WooCommerce: Update to version 1.4.9, or a newer patched version
YITH WooCommerce Social Login: Update to version 1.3.6, or a newer patched version
YITH WooCommerce Stripe: Update to version 2.0.2, or a newer patched version
YITH WooCommerce Subscription: Update to version 1.3.6, or a newer patched version
YITH WooCommerce Waitlist: Update to version 1.3.11, or a newer patched version
YITH WooCommerce Wishlist: Update to version 2.2.14, or a newer patched version
YITH WooCommerce Product Gallery & Image Zoom: Update to version 1.3.12, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
Produkt YITH Advanced Refund System for WooCommerce
Version * - 1.0.10
SystemWordPress Plugin
Produkt YITH Color and Label Variations for WooCommerce
Version * - 1.8.11
SystemWordPress Plugin
Produkt YITH Custom Thank You Page for WooCommerce
Version * - 1.1.6
SystemWordPress Plugin
Produkt YITH Desktop Notifications for WooCommerce
Version * - 1.2.7
SystemWordPress Plugin
Produkt YITH PayPal Express Checkout for WooCommerce
Version * - 1.2.5
SystemWordPress Plugin
Produkt YITH Pre-Order for WooCommerce
Version * - 1.1.9
SystemWordPress Plugin
Produkt YITH Product Size Charts for WooCommerce
Version * - 1.1.1
SystemWordPress Plugin
Produkt YITH WooCommerce Added to Cart Popup
Version * - 1.3.11
SystemWordPress Plugin
Produkt YITH WooCommerce Advanced Reviews
Version * - 1.3.9
SystemWordPress Plugin
Produkt YITH WooCommerce Affiliates
Version [*, 1.6.3)
SystemWordPress Plugin
Produkt YITH WooCommerce Ajax Search
Version * - 1.6.9
SystemWordPress Plugin
Produkt YITH WooCommerce Authorize.net Payment Gateway
Version * - 1.1.12
SystemWordPress Plugin
Produkt YITH WooCommerce Badge Management
Version * - 1.3.19
SystemWordPress Plugin
Produkt YITH WooCommerce Best Sellers
Version * - 1.1.11
SystemWordPress Plugin
Produkt YITH WooCommerce Brands Add-On
Version * - 1.3.6
SystemWordPress Plugin
Produkt YITH WooCommerce Bulk Product Editing
Version * - 1.2.13
SystemWordPress Plugin
Produkt YITH WooCommerce Cart Messages
Version * - 1.4.3
SystemWordPress Plugin
Produkt YITH WooCommerce Compare
Version * - 2.3.13
SystemWordPress Plugin
Produkt YITH Frequently Bought Together for WooCommerce
Version * - 1.2.10
SystemWordPress Plugin
Produkt YITH WooCommerce Gift Cards
Version * - 1.3.7
SystemWordPress Plugin
Produkt YITH WooCommerce Mailchimp
Version * - 2.1.3
SystemWordPress Plugin
Produkt YITH WooCommerce Multi-step Checkout
Version * - 1.7.4
SystemWordPress Plugin
Produkt YITH WooCommerce Order & Shipment Tracking
Version * - 1.2.10
SystemWordPress Plugin
Produkt YITH WooCommerce PDF Invoice and Shipping List
Version * - 1.2.12
SystemWordPress Plugin
Produkt YITH WooCommerce Points and Rewards
Version * - 1.3.4
SystemWordPress Plugin
Produkt YITH WooCommerce Product Add-Ons
Version * - 1.5.21
SystemWordPress Plugin
Produkt YITH WooCommerce Product Bundles
Version * - 1.1.15
SystemWordPress Plugin
Produkt YITH WooCommerce Multi Vendor
Version * - 3.4.0
SystemWordPress Plugin
Produkt YITH WooCommerce Questions and Answers
Version * - 1.1.9
SystemWordPress Plugin
Produkt YITH WooCommerce Quick View
Version * - 1.3.13
SystemWordPress Plugin
Produkt YITH WooCommerce Recover Abandoned Cart
Version * - 1.3.2
SystemWordPress Plugin
Produkt YITH Request a Quote for WooCommerce
Version * - 1.4.7
SystemWordPress Plugin
Produkt YITH WooCommerce Social Login
Version * - 1.3.4
SystemWordPress Plugin
Produkt YITH WooCommerce Stripe
Version * - 2.0.1
SystemWordPress Plugin
Produkt YITH WooCommerce Subscription
Version * - 1.3.4
SystemWordPress Plugin
Produkt YITH WooCommerce Waitlist
Version * - 1.3.9
SystemWordPress Plugin
Produkt YITH WooCommerce Wishlist
Version * - 2.2.13
SystemWordPress Plugin
Produkt YITH WooCommerce Product Gallery & Image Zoom
Version * - 1.3.11
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
YithemesYith Woocommerce Wishlist SwPlatformwordpress Version <= 2.2.13
YithemesYith Woocommerce Compare SwPlatformwordpress Version <= 2.3.13
YithemesYith Woocommerce Quick View SwPlatformwordpress Version <= 1.3.13
YithemesYith Woocommerce Zoom Magnifier SwPlatformwordpress Version <= 1.3.11
YithemesYith Woocommerce Ajax Search SwPlatformwordpress Version <= 1.6.9
YithemesYith Woocommerce Badge Management SwPlatformwordpress Version <= 1.3.19
YithemesYith Woocommerce Brands Add-on SwPlatformwordpress Version <= 1.3.6
YithemesYith Woocommerce Request A Quote SwPlatformwordpress Version <= 1.4.7
YithemesYith Woocommerce Social Login SwPlatformwordpress Version <= 1.3.4
YithemesYith Woocommerce Order Tracking SwPlatformwordpress Version <= 1.2.10
YithemesYith Woocommerce Pdf Invoice And Shipping List SwPlatformwordpress Version <= 1.2.12
YithemesYith Pre-order For Woocommerce SwPlatformwordpress Version <= 1.1.9
YithemesYith Woocommerce Advanced Reviews SwPlatformwordpress Version <= 1.3.9
YithemesYith Woocommerce Product Add-ons SwPlatformwordpress Version <= 1.5.21
YithemesYith Woocommerce Gift Cards SwPlatformwordpress Version <= 1.3.7
YithemesYith Woocommerce Subscription SwPlatformwordpress Version <= 1.3.4
YithemesYith Woocommerce Affiliates SwPlatformwordpress Version <= 1.6.3
YithemesYith Woocommerce Cart Messages SwPlatformwordpress Version <= 1.4.3
YithemesYith Woocommerce Product Bundles SwPlatformwordpress Version <= 1.1.15
YithemesYith Woocommerce Frequently Bought Together SwPlatformwordpress Version <= 1.2.10
YithemesYith Woocommerce Multi-step Checkout SwPlatformwordpress Version <= 1.7.4
YithemesYith Color And Label Variations For Woocommerce SwPlatformwordpress Version <= 1.8.11
YithemesYith Custom Thank You Page For Woocommerce SwPlatformwordpress Version <= 1.1.6
YithemesYith Product Size Charts For Woocommerce SwPlatformwordpress Version <= 1.1.1
YithemesYith Woocommerce Added To Cart Popup SwPlatformwordpress Version <= 1.3.11
YithemesYith Woocommerce Bulk Product Editing SwPlatformwordpress Version <= 1.2.13
YithemesYith Woocommerce Stripe SwPlatformwordpress Version <= 2.0.1
YithemesYith Woocommerce Waiting List SwPlatformwordpress Version <= 1.3.9
YithemesYith Woocommerce Points And Rewards SwPlatformwordpress Version <= 1.3.4
YithemesYith Advanced Refund System For Woocommerce SwPlatformwordpress Version <= 1.0.10
YithemesYith Woocommerce Authorize.Net Payment Gateway SwPlatformwordpress Version <= 1.1.12
YithemesYith Woocommerce Best Sellers SwPlatformwordpress Version <= 1.1.11
YithemesYith Woocommerce Mailchimp SwPlatformwordpress Version <= 2.1.3
YithemesYith Woocommerce Multi Vendor SwPlatformwordpress Version <= 3.4.0
YithemesYith Woocommerce Questions And Answers SwPlatformwordpress Version <= 1.1.9
YithemesYith Woocommerce Recover Abandoned Cart SwPlatformwordpress Version <= 1.3.2
YithemesYith Paypal Express Checkout For Woocommerce SwPlatformwordpress Version <= 1.2.5
YithemesYith Desktop Notifications For Woocommerce SwPlatformwordpress Version <= 1.2.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.654
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N