CVE-2022-44630: WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF)

Deferred

Published 11-06-2026Last modified 11-06-2026

Vulnerability summary

CVE-2022-44630 is a medium (CVSS 4.6) Cross-Site Request Forgery (CSRF) vulnerability in wordpress yith-color-and-label-variations-for-woocommerce. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.3% of scored vulnerabilities. Fixed in 1.25.1.

Overall risk

18/100

0100

Low · default modelHow is this calculated?

CVSS score

4.6/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.14%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

11-06-2026
PublishedVulnerability first disclosed.
11-06-2026
Last modifiedVulnerability information updated.

Description

Cross-Site request forgery (CSRF) vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. This issue affects YITH WooCommerce Product Slider Carousel: from n/a through 1.16.0.

CVSS metrics

3 scores · 3 sources · 1 version

v3.14.6

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.14% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Affected systems

Wordpress45 products

yith-color-and-label-variations-for-woocommerce≤ 1.25.0 (fixed in 1.25.1)
yith-custom-thank-you-page-for-woocommerce≤ 1.9.0
yith-donations-for-woocommerce≤ 1.3.0
yith-essential-kit-for-woocommerce-1≤ 2.13.0 (fixed in 2.14.0)
yith-infinite-scrolling≤ 1.7.0 (fixed in 1.8.0)

yith-paypal-express-checkout-for-woocommerce≤ 1.20.0 (fixed in 1.20.1)
yith-paypal-payments-for-woocommerce≤ 1.3.1
yith-pre-order-for-woocommerce≤ 2.5.0 (fixed in 2.6.0)
yith-woocommerce-added-to-cart-popup≤ 1.8.0
yith-woocommerce-advanced-reviews≤ 1.7.0
yith-woocommerce-affiliates≤ 2.7.0 (fixed in 2.8.0)
yith-woocommerce-ajax-navigation≤ 4.15.0 (fixed in 4.16.0)
yith-woocommerce-ajax-search≤ 1.25.0 (fixed in 1.25.1)
yith-woocommerce-authorizenet-payment-gateway≤ 1.2.6
yith-woocommerce-badges-management≤ 2.10.0 (fixed in 2.11.0)
yith-woocommerce-brands-add-on≤ 2.5.0 (fixed in 2.6.0)
yith-woocommerce-bulk-product-editing≤ 1.2.27
yith-woocommerce-cart-messages≤ 1.8.0
yith-woocommerce-catalog-mode≤ 2.16.0 (fixed in 2.16.1)
yith-woocommerce-category-accordion≤ 1.6.0
yith-woocommerce-compare≤ 2.20.0 (fixed in 2.20.1)
yith-woocommerce-featured-video≤ 1.18.0 (fixed in 1.18.1)
yith-woocommerce-frequently-bought-together≤ 1.18.0 (fixed in 1.19.1)
yith-woocommerce-gift-cards≤ 2.14.0 (fixed in 2.15.0)
yith-woocommerce-mailchimp≤ 2.5.0
yith-woocommerce-multi-step-checkout≤ 2.0.5
yith-woocommerce-name-your-price≤ 1.3.0
yith-woocommerce-order-tracking≤ 2.7.0 (fixed in 2.8.0)
yith-woocommerce-pdf-invoice≤ 1.3.0
yith-woocommerce-points-and-rewards≤ 1.6.1
yith-woocommerce-popup≤ 1.21.0 (fixed in 1.21.1)
yith-woocommerce-product-add-ons≤ 2.15.0 (fixed in 2.16.0)
yith-woocommerce-product-bundles≤ 1.16.0 (fixed in 1.17.0)
yith-woocommerce-product-slider-carousel≤ 1.16.0 (fixed in 1.16.1)
yith-woocommerce-product-vendors≤ 3.9.0
yith-woocommerce-questions-and-answers≤ 1.5.0
yith-woocommerce-quick-view≤ 1.21.0 (fixed in 1.21.1)
yith-woocommerce-request-a-quote≤ 2.15.0 (fixed in 2.15.1)
yith-woocommerce-social-login≤ 1.4.9
yith-woocommerce-stripe≤ 2.0.17
yith-woocommerce-subscription≤ 2.16.0 (fixed in 2.16.1)
yith-woocommerce-tab-manager≤ 1.17.0 (fixed in 1.17.1)
yith-woocommerce-waiting-list≤ 1.21.0 (fixed in 1.21.1)
yith-woocommerce-wishlist≤ 3.14.0 (fixed in 3.15.0)
yith-woocommerce-zoom-magnifier≤ 2.14.0 (fixed in 2.15.0)

Show all 45

Yith1 product

yith woocommerce product slider carousel≥ n/a, ≤ 1.16.0

2 vendors · 46 products

References

2 links

patchstack.com/database/…VDB Entry
www.wordfence.com/threat-intel/vulnerabilities/id/f002d061-4e9d-49be-9d4c-c470ec97f653Vendor Advisory