4.3.0

DATE	CVE	VULNERABILITY TITLE	RISK
2024-10-28	CVE-2024-50448	Cross-site Scripting vulnerability in Yithemes Yith Woocommerce Product Add-Ons Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Reflected XSS.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.14.1. network low complexity yithemes CWE-79	6.1
2024-06-10	CVE-2024-35680	Unspecified vulnerability in Yithemes Yith Woocommerce Product Add-Ons Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Code Injection.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.9.2. network low complexity yithemes	5.3
2023-12-31	CVE-2023-49777	Unspecified vulnerability in Yithemes Yith Woocommerce Product Add-Ons Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0. network low complexity yithemes	8.8