YITH WooCommerce Product Bundles

YITH WooCommerce Product Bundles has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 4 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 7.1 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (75%). Other recurring categories include Cross-Site Request Forgery (CSRF).

Every one of the 4 issues recorded for YITH WooCommerce Product Bundles has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. YITH WooCommerce Product Bundles is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all YITH WooCommerce Product Bundles vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.1

YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization

Read the full analysis

Vulnerability Records

4 records


2026-10-08 00:00	YITH WooCommerce Product Bundles <= 2.29.0 - Missing Authorization YITH WooCommerce Product Bundles <= 2.29.0	`CVE-2026-105878`	5.3 Medium	sungbyeongchan	Yes
2022-11-11 00:00	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization YITH WooCommerce Product Bundles <= 1.16.0	`N/A`	7.1 High	Anonymous	Yes
2022-11-11 00:00	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery YITH WooCommerce Product Bundles <= 1.16.0	`CVE-2022-44630`	4.3 Medium	István Márton	Yes
2019-10-31 00:00	YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change YITH WooCommerce Product Bundles <= 1.1.15	`CVE-2019-16251`	4.3 Medium	Jerome Bruandet	Yes

Showing 1–4 of 4 reports

Latestv2.30.0

YITH WooCommerce Product Bundles

Author

YITHEMES

3.2(24)

64/100

Last Updated

2026-10-06 (13d ago)

Active Installs

3,000+

Downloads

342,222

Requires WP

6.9+

Requires PHP

8.0+

Tested up to

WP 7.1.3

Created

2015-07-20 (11y ago)

Requires Plugins

woocommerce

Bundles are the best way to offer deals and unmissable mix of products to your customers: with YITH WooCommerce Product Bundles you will be able to do it easily and quickly! Set how many items you bundle should have and choose the single products: they will be showed clearly in the bundle detail page and your customers will be free to appreciate the combinations you have created. Features: Create a product bundle Assign how many simple products you want Suggestions If you have suggestions about how to improve YITH WooCommerce Product Bundles, you can write us so we can enhance our YITH WooCommerce Product Bundles plugin. Translators Available Languages English (Default) If you have created your own language pack, or have an update for an existing one, you can send gettext PO and MO file use so we can bundle it into YITH WooCommerce Product Bundles

View on WordPress.org