Security Advisory

CVE-2026-42383

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-20 12:55:50

Last updated 2026-05-20 15:29:13

Assigner Patchstack

CVSS score 7.6

State PUBLISHED

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.29.0.

← Browse all CVEs View on cve.org ↗