medium4.3
CVE-2019-16251
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
Impact
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yithemes | Yith Woocommerce Wishlist | through 2.2.13 |
| Yithemes | Yith Woocommerce Compare | through 2.3.13 |
| Yithemes | Yith Woocommerce Quick View | through 1.3.13 |
| Yithemes | Yith Woocommerce Zoom Magnifier | through 1.3.11 |
| Yithemes | Yith Woocommerce Ajax Search | through 1.6.9 |
| Yithemes | Yith Woocommerce Badge Management | through 1.3.19 |
| Yithemes | Yith Woocommerce Brands Add-On | through 1.3.6 |
| Yithemes | Yith Woocommerce Request A Quote | through 1.4.7 |
| Yithemes | Yith Woocommerce Social Login | through 1.3.4 |
| Yithemes | Yith Woocommerce Order Tracking | through 1.2.10 |
| Yithemes | Yith Woocommerce Pdf Invoice And Shipping List | through 1.2.12 |
| Yithemes | Yith Pre-Order For Woocommerce | through 1.1.9 |