The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 6.5 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N | 2.8 | 3.6 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-352,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| yithemes | yith_maintenance_mode | * |
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 4.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | 2.8 | 1.4 |
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-noinfo,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| yithemes | yith_woocommerce_mailchimp | * |
| yithemes | yith_woocommerce_authorize.net_payment_gateway | * |
| yithemes | yith_woocommerce_request_a_quote | * |
| yithemes | yith_woocommerce_best_sellers | * |
| yithemes | yith_woocommerce_cart_messages | * |
| yithemes | yith_woocommerce_social_login | * |
| yithemes | yith_woocommerce_pdf_invoice_and_shipping_list | * |
| yithemes | yith_woocommerce_brands_add-on | * |
| yithemes | yith_woocommerce_quick_view | * |
| yithemes | yith_desktop_notifications_for_woocommerce | * |
| yithemes | yith_woocommerce_product_bundles | * |
| yithemes | yith_woocommerce_bulk_product_editing | * |
| yithemes | yith_woocommerce_added_to_cart_popup | * |
| yithemes | yith_woocommerce_wishlist | * |
| yithemes | yith_woocommerce_order_tracking | * |
| yithemes | yith_woocommerce_advanced_reviews | * |
| yithemes | yith_woocommerce_ajax_search | * |
| yithemes | yith_woocommerce_compare | * |
| yithemes | yith_woocommerce_affiliates | * |
| yithemes | yith_woocommerce_badge_management | * |
| yithemes | yith_woocommerce_multi_vendor | * |
| yithemes | yith_woocommerce_questions_and_answers | * |
| yithemes | yith_color_and_label_variations_for_woocommerce | * |
| yithemes | yith_woocommerce_zoom_magnifier | * |
| yithemes | yith_woocommerce_frequently_bought_together | * |
| yithemes | yith_woocommerce_multi-step_checkout | * |
| yithemes | yith_woocommerce_recover_abandoned_cart | * |
| yithemes | yith_woocommerce_product_add-ons | * |
| yithemes | yith_paypal_express_checkout_for_woocommerce | * |
| yithemes | yith_advanced_refund_system_for_woocommerce | * |
| yithemes | yith_woocommerce_waiting_list | * |
| yithemes | yith_product_size_charts_for_woocommerce | * |
| yithemes | yith_pre-order_for_woocommerce | * |
| yithemes | yith_woocommerce_stripe | * |
| yithemes | yith_woocommerce_points_and_rewards | * |
| yithemes | yith_custom_thank_you_page_for_woocommerce | * |
| yithemes | yith_woocommerce_subscription | * |
| yithemes | yith_woocommerce_gift_cards | * |