Live › vulnerability › CVE-2026-107868
YITH WooCommerce Product Add-Ons, a WordPress plugin for WooCommerce stores, has an authentication bypass affecting versions up to and including 4.34.0. The sources do not say what an attacker can reach beyond bypassing the check.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Stores running YITH WooCommerce Product Add-Ons at version 4.34.0 or older are in the stated range. The sources do not say which endpoints or configurations are exposed, so unknown whether a default install is affected.
No product ranges from the sources yet.
wp plugin get yith-woocommerce-product-add-ons --field=version4.34.0 of YITH WooCommerce Product Add-Ons; the exact fixed version is not stated in the sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions.
This page as .md · .json · in your agent: get_signal("CVE-2026-107868")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.