CVE-2024-37943: Yithemes Yith Woocommerce AJAX Product Filter

Medium severity, CVSS 5.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Ajax Product Filter yith-woocommerce-ajax-navigation.This issue affects YITH WooCommerce Ajax Product Filter: from n/a through <= 5.1.0.

Affected products

• Yithemes Yith Woocommerce AJAX Product Filter: up to and including 5.1.0

Published 2024-07-20. Last modified 2026-06-17.