Unknown YITH Woocommerce Popup vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown YITH Woocommerce Popup, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9CVE-2026-92426unknownyith woocommerce popup
EPSS score
0.25%
The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role and above to delete arbitrary post meta from any post, including content owned by higher-privileged users.