YITH WooCommerce Product Add-Ons, CVE-2026-42383

CVE, Research URL: CVE-2026-42383
Home page URL: Security reports for YITH WooCommerce Product Add-Ons
Application: YITH WooCommerce Product Add-Ons
Published on: May 20, 2026
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.
Affected versions: max 4.29.1.
Status: vulnerable