Yithemes Yith Woocommerce Tab Manager vulnerabilities

2 CVEs affecting Yithemes Yith Woocommerce Tab Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-97292, published 2026-09-30.

More from Yithemes.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-35698, published 2024-06-08. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Tab Manager yith-woocommerce-tab-manager.This issue affects YITH…
• CVE-2026-97292, published 2026-09-30. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager <= 2.15.0 versions.