Yith Paypal Express Checkout For Woocommerce CVEs and Security Vulnerabilities

Vulnerabilities (Yith Paypal Express Checkout For Woocommerce)

CVE-2025-48111

WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.49.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in YITHEMES YITH PayPal Express Checkout for WooCommerce allows Cross Site Request Forgery. This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.49.0.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Wordpress Yithemes

Products

Wordpress Yith Paypal Express Checkout For Woocommerce

CVE-2019-16251

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Yithemes

Products

Yith Advanced Refund System For Woocommerce Yith Color And Label Variations For Woocommerce Yith Custom Thank You Page For Woocommerce and 35 more

Search vulnerabilities

WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.49.0 - Cross Site Request Forgery (CSRF) vulnerability