CVE-2019-16251

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.

• yithemes yith woocommerce wishlist (<= 2.2.13) • yithemes yith woocommerce compare (<= 2.3.13) • yithemes yith woocommerce quick view (<= 1.3.13) • yithemes yith woocommerce zoom magnifier (<= 1.3.11) • yithemes yith woocommerce ajax search (<= 1.6.9) • yithemes yith woocommerce badge management (<= 1.3.19) • yithemes yith woocommerce brands add-on (<= 1.3.6) • yithemes yith woocommerce request a quote (<= 1.4.7) • yithemes yith woocommerce social login (<= 1.3.4) • yithemes yith woocommerce order tracking (<= 1.2.10) • yithemes yith woocommerce pdf invoice and shipping list (<= 1.2.12) • yithemes yith pre-order for woocommerce (<= 1.1.9) • yithemes yith woocommerce advanced reviews (<= 1.3.9) • yithemes yith woocommerce product add-ons (<= 1.5.21) • yithemes yith woocommerce gift cards (<= 1.3.7) • yithemes yith woocommerce subscription (<= 1.3.4) • yithemes yith woocommerce affiliates (<= 1.6.3) • yithemes yith woocommerce cart messages (<= 1.4.3) • yithemes yith woocommerce product bundles (<= 1.1.15) • yithemes yith woocommerce frequently bought together (<= 1.2.10) • yithemes yith woocommerce multi-step checkout (<= 1.7.4) • yithemes yith color and label variations for woocommerce (<= 1.8.11) • yithemes yith custom thank you page for woocommerce (<= 1.1.6) • yithemes yith product size charts for woocommerce (<= 1.1.1) • yithemes yith woocommerce added to cart popup (<= 1.3.11) • yithemes yith woocommerce bulk product editing (<= 1.2.13) • yithemes yith woocommerce stripe (<= 2.0.1) • yithemes yith woocommerce waiting list (<= 1.3.9) • yithemes yith woocommerce points and rewards (<= 1.3.4) • yithemes yith advanced refund system for woocommerce (<= 1.0.10) • yithemes yith woocommerce authorize.net payment gateway (<= 1.1.12) • yithemes yith woocommerce best sellers (<= 1.1.11) • yithemes yith woocommerce mailchimp (<= 2.1.3) • yithemes yith woocommerce multi vendor (<= 3.4.0) • yithemes yith woocommerce questions and answers (<= 1.1.9) • yithemes yith woocommerce recover abandoned cart (<= 1.3.2) • yithemes yith paypal express checkout for woocommerce (<= 1.2.5) • yithemes yith desktop notifications for woocommerce (<= 1.2.7)