CVE-2026-28169

Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions.

Scoring

Severity

MEDIUM

CVSS base score

5.3

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS probability

0.23%

CWE

CWE-497

Published

2026-08-06

Last modified

2026-08-06

Affected products

• YITHEMES YITH WooCommerce Zoom Magnifier

Weakness type

• CWE-497

Related vulnerabilities

• CVE-2026-61911 — An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An...
• CVE-2026-81394 — Microsoft Excel Information Disclosure Vulnerability
• CVE-2026-81387 — Microsoft Excel Information Disclosure Vulnerability
• CVE-2026-69315 — Windows License Manager Information Disclosure Vulnerability
• CVE-2026-68842 — Windows MIDI Service Module Information Disclosure Vulnerability
• CVE-2026-71330 — Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
• CVE-2026-69832 — Win32k Information Disclosure Vulnerability
• CVE-2026-69723 — Windows Kernel Information Disclosure Vulnerability

Markdown version · Browse all CVEs