Yithemes

Yith Woocommerce Gift Cards

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2024-0870

  • EPSS 0.22%
  • Published 14.05.2024 16:15:54
  • Last modified 21.11.2024 08:47:33

The YITH WooCommerce Gift Cards plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_mail_status' and 'save_email_settings' functions in all versions up to, and including, 4.12.0. This...

9.8

CVE-2022-45359

  • EPSS 18.33%
  • Published 06.12.2022 21:15:10
  • Last modified 21.11.2024 07:29:06

Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.

10

CVE-2021-3120

Exploit
  • EPSS 12.25%
  • Published 22.02.2021 15:15:13
  • Last modified 21.11.2024 06:20:55

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order t...

4.3

CVE-2019-16251

  • EPSS 0.51%
  • Published 31.10.2019 17:15:10
  • Last modified 21.11.2024 04:30:23

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.