YITH
YITH Security Releases - October 2026
yith-2026-10 Oct 1, 2026 Source: Vendor
YITH security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-106604
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2 matching , clear filters
CVE-2026-106604
BR2026-0000-032671
YITH WooCommerce Compare
unclaimed
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Compare yith-woocommerce-compare allows Stored XSS.This issue affects YIT...
Credited as Intrudify
CVE-2026-111409
BR2026-0000-034215
YITH PayPal Express Checkout for WooCommerce
unclaimed
Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Securit...
Credited as Oly Hossen