CVE-2019-16251

Published: Oct 31, 2019Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.

Affected (38)

Products: Yithemes: Yith Woocommerce Wishlist, Yith Woocommerce Compare, Yith Woocommerce Quick View, Yith Woocommerce Zoom Magnifier, Yith Woocommerce Ajax Search, Yith Woocommerce Badge Management, Yith Woocommerce Brands Add On, Yith Woocommerce Request A Quote, Yith Woocommerce Social Login, Yith Woocommerce Order Tracking, Yith Woocommerce Pdf Invoice And Shipping List, Yith Pre Order For Woocommerce, Yith Woocommerce Advanced Reviews, Yith Woocommerce Product Add Ons, Yith Woocommerce Gift Cards, Yith Woocommerce Subscription, Yith Woocommerce Affiliates, Yith Woocommerce Cart Messages, Yith Woocommerce Product Bundles, Yith Woocommerce Frequently Bought Together, Yith Woocommerce Multi Step Checkout, Yith Color And Label Variations For Woocommerce, Yith Custom Thank You Page For Woocommerce, Yith Product Size Charts For Woocommerce, Yith Woocommerce Added To Cart Popup, Yith Woocommerce Bulk Product Editing, Yith Woocommerce Stripe, Yith Woocommerce Waiting List, Yith Woocommerce Points And Rewards, Yith Advanced Refund System For Woocommerce, Yith Woocommerce Authorize.net Payment Gateway, Yith Woocommerce Best Sellers, Yith Woocommerce Mailchimp, Yith Woocommerce Multi Vendor, Yith Woocommerce Questions And Answers, Yith Woocommerce Recover Abandoned Cart, Yith Paypal Express Checkout For Woocommerce, Yith Desktop Notifications For Woocommerce

Yithemes

38 products

Yith Woocommerce Wishlist

Yith Woocommerce Compare

Yith Woocommerce Quick View

Yith Woocommerce Zoom Magnifier

Yith Woocommerce Ajax Search

Yith Woocommerce Badge Management

Yith Woocommerce Brands Add On

Yith Woocommerce Request A Quote

Yith Woocommerce Social Login

Yith Woocommerce Order Tracking

Yith Woocommerce Pdf Invoice And Shipping List

Yith Pre Order For Woocommerce

Yith Woocommerce Advanced Reviews

Yith Woocommerce Product Add Ons

Yith Woocommerce Gift Cards

Yith Woocommerce Subscription

Yith Woocommerce Affiliates

Yith Woocommerce Cart Messages

Yith Woocommerce Product Bundles

Yith Woocommerce Frequently Bought Together

Yith Woocommerce Multi Step Checkout

Yith Color And Label Variations For Woocommerce

Yith Custom Thank You Page For Woocommerce

Yith Product Size Charts For Woocommerce

Yith Woocommerce Added To Cart Popup

Yith Woocommerce Bulk Product Editing

Yith Woocommerce Stripe

Yith Woocommerce Waiting List

Yith Woocommerce Points And Rewards

Yith Advanced Refund System For Woocommerce

Yith Woocommerce Authorize.net Payment Gateway

Yith Woocommerce Best Sellers

Yith Woocommerce Mailchimp

Yith Woocommerce Multi Vendor

Yith Woocommerce Questions And Answers

Yith Woocommerce Recover Abandoned Cart

Yith Paypal Express Checkout For Woocommerce

Yith Desktop Notifications For Woocommerce

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Wishlist	Up to 2.2.13

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Compare	Up to 2.3.13

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Quick View	Up to 1.3.13

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Zoom Magnifier	Up to 1.3.11

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Ajax Search	Up to 1.6.9

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Badge Management	Up to 1.3.19

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Brands Add On	Up to 1.3.6

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Request A Quote	Up to 1.4.7

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Social Login	Up to 1.3.4

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Order Tracking	Up to 1.2.10

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Pdf Invoice And Shipping List	Up to 1.2.12

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Pre Order For Woocommerce	Up to 1.1.9

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Advanced Reviews	Up to 1.3.9

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Product Add Ons	Up to 1.5.21

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Gift Cards	Up to 1.3.7

Configuration P

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Subscription	Up to 1.3.4

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Affiliates	Up to 1.6.3

Configuration R

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Cart Messages	Up to 1.4.3

Configuration S

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Product Bundles	Up to 1.1.15

Configuration T

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Frequently Bought Together	Up to 1.2.10

Configuration U

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Multi Step Checkout	Up to 1.7.4

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Color And Label Variations For Woocommerce	Up to 1.8.11

Configuration W

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Custom Thank You Page For Woocommerce	Up to 1.1.6

Configuration X

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Product Size Charts For Woocommerce	Up to 1.1.1

Configuration Y

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Added To Cart Popup	Up to 1.3.11

Configuration Z

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Bulk Product Editing	Up to 1.2.13

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Stripe	Up to 2.0.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Waiting List	Up to 1.3.9

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Points And Rewards	Up to 1.3.4

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Advanced Refund System For Woocommerce	Up to 1.0.10

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Authorize.net Payment Gateway	Up to 1.1.12

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Best Sellers	Up to 1.1.11

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Mailchimp	Up to 2.1.3

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Multi Vendor	Up to 3.4.0

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Questions And Answers	Up to 1.1.9

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Woocommerce Recover Abandoned Cart	Up to 1.3.2

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Paypal Express Checkout For Woocommerce	Up to 1.2.5

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Yithemes Yith Desktop Notifications For Woocommerce	Up to 1.2.7

References (4)

https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-yit-plugin-framework/

Source: cve@mitre.org

Third Party Advisory

https://wpvulndb.com/vulnerabilities/9932

Source: cve@mitre.org

Third Party Advisory

https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-yit-plugin-framework/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://wpvulndb.com/vulnerabilities/9932

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.