Yithemes Yith Woocommerce Zoom Magnifier vulnerabilities

2 CVEs affecting Yithemes Yith Woocommerce Zoom Magnifier, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-28169, published 2026-08-06.

More from Yithemes.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-16251, published 2019-10-31. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.
• CVE-2026-28169, published 2026-08-06. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions.