Plugin security history

YITH Request a Quote for WooCommerce Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 5 vulnerability records associated with YITH Request a Quote for WooCommerce, published between 2019 and 2026.

Dataset last synchronized: 2026-08-02 09:41:47 UTC

At a glance

Security Snapshot

5Total records

0Critical

2High

3Medium

0Low

0Informational

5Patched records

0Currently marked unpatched

2019-10-31First disclosure

2026-01-09Latest disclosure

3 of 5CVE coverage

Year-by-Year Timeline

Year	Records	Relative volume
2019	1	1 records
2021	1	1 records
2022	2	2 records
2026	1	1 records

Severity Breakdown

Severity	Records	Share
High	2	40%
Medium	3	60%

Vulnerability-Type Breakdown

Missing Authorization

3 records60%

First: 2019. Latest: 2026.

CSRF

2 records40%

First: 2021. Latest: 2022.

Patch Status

Patched: 5
Currently marked unpatched: 0
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

2.46.1
2.15.1
1.6.4
1.4.9

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-2.46.0`	YITH WooCommerce Request A Quote <= 2.46.0 - Missing Authorization	January 9, 2026	2.46.1	Medium
`*-2.15.0`	YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery	November 11, 2022	2.15.1	Medium
`*-2.15.0`	YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization	November 11, 2022	2.15.1	High
`*-1.6.3`	YITH Request a Quote for WooCommerce <= 1.6.3 - Cross-Site Request Forgery	June 30, 2021	1.6.4	High
`*-1.4.7`	YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change	October 31, 2019	1.4.9	Medium

Selected source records

Latest Records

MediumCVE-2026-24366

YITH WooCommerce Request A Quote <= 2.46.0 - Missing Authorization

Published: January 9, 2026

Affected versions: *-2.46.0
Patched versions: 2.46.1

Original Wordfence record

High

YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization

Published: November 11, 2022

Affected versions: *-1.2.27
Patched versions: Not supplied

Affected versions: *-2.14.0
Patched versions: 2.15.0

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-2.10.0
Patched versions: 2.11.0

Affected versions: *-2.15.0
Patched versions: 2.16.0

Affected versions: *-1.17.0
Patched versions: 1.17.1

Affected versions: *-1.5.0
Patched versions: Not supplied

Affected versions: *-1.2.6
Patched versions: Not supplied

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-2.7.0
Patched versions: 2.8.0

Affected versions: *-1.8.0
Patched versions: Not supplied

Affected versions: *-2.16.0
Patched versions: 2.16.1

Affected versions: *-1.20.0
Patched versions: 1.20.1

Affected versions: *-4.15.0
Patched versions: 4.16.0

Affected versions: *-3.14.0
Patched versions: 3.15.0

Affected versions: *-2.0.17
Patched versions: Not supplied

Affected versions: *-1.9.0
Patched versions: Not supplied

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-2.20.0
Patched versions: 2.20.1

Affected versions: *-1.25.0
Patched versions: 1.25.1

Affected versions: *-1.25.0
Patched versions: 1.25.1

Affected versions: *-2.13.0
Patched versions: 2.14.0

Affected versions: *-2.5.0
Patched versions: Not supplied

Affected versions: *-1.7.0
Patched versions: 1.8.0

Affected versions: *-3.9.0
Patched versions: Not supplied

Affected versions: *-2.5.0
Patched versions: 2.6.0

Affected versions: *-1.16.0
Patched versions: 1.17.0

Affected versions: *-2.15.0
Patched versions: 2.15.1

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-1.6.0
Patched versions: Not supplied

Affected versions: *-2.5.0
Patched versions: 2.6.0

Affected versions: *-2.14.0
Patched versions: 2.15.0

Affected versions: *-1.3.1
Patched versions: Not supplied

Affected versions: *-1.6.1
Patched versions: Not supplied

Affected versions: *-2.0.5
Patched versions: Not supplied

Affected versions: *-1.8.0
Patched versions: Not supplied

Affected versions: *-1.16.0
Patched versions: 1.16.1

Affected versions: *-2.16.0
Patched versions: 2.16.1

Affected versions: *-2.7.0
Patched versions: 2.8.0

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-1.7.0
Patched versions: Not supplied

Affected versions: *-1.18.0
Patched versions: 1.19.1

Affected versions: *-1.18.0
Patched versions: 1.18.1

Affected versions: *-1.4.9
Patched versions: Not supplied

Original Wordfence record

MediumCVE-2022-44630

YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery

Published: November 11, 2022

Affected versions: *-1.2.27
Patched versions: Not supplied

Affected versions: *-2.14.0
Patched versions: 2.15.0

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-2.10.0
Patched versions: 2.11.0

Affected versions: *-2.15.0
Patched versions: 2.16.0

Affected versions: *-1.17.0
Patched versions: 1.17.1

Affected versions: *-1.5.0
Patched versions: Not supplied

Affected versions: *-1.2.6
Patched versions: Not supplied

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-2.7.0
Patched versions: 2.8.0

Affected versions: *-1.8.0
Patched versions: Not supplied

Affected versions: *-2.16.0
Patched versions: 2.16.1

Affected versions: *-1.20.0
Patched versions: 1.20.1

Affected versions: *-4.15.0
Patched versions: 4.16.0

Affected versions: *-3.14.0
Patched versions: 3.15.0

Affected versions: *-2.0.17
Patched versions: Not supplied

Affected versions: *-1.9.0
Patched versions: Not supplied

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-2.20.0
Patched versions: 2.20.1

Affected versions: *-1.25.0
Patched versions: 1.25.1

Affected versions: *-1.25.0
Patched versions: 1.25.1

Affected versions: *-2.13.0
Patched versions: 2.14.0

Affected versions: *-2.5.0
Patched versions: Not supplied

Affected versions: *-1.7.0
Patched versions: 1.8.0

Affected versions: *-3.9.0
Patched versions: Not supplied

Affected versions: *-2.5.0
Patched versions: 2.6.0

Affected versions: *-1.16.0
Patched versions: 1.17.0

Affected versions: *-2.15.0
Patched versions: 2.15.1

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-1.6.0
Patched versions: Not supplied

Affected versions: *-2.5.0
Patched versions: 2.6.0

Affected versions: *-2.14.0
Patched versions: 2.15.0

Affected versions: *-1.3.1
Patched versions: Not supplied

Affected versions: *-1.6.1
Patched versions: Not supplied

Affected versions: *-2.0.5
Patched versions: Not supplied

Affected versions: *-1.8.0
Patched versions: Not supplied

Affected versions: *-1.16.0
Patched versions: 1.16.1

Affected versions: *-2.16.0
Patched versions: 2.16.1

Affected versions: *-2.7.0
Patched versions: 2.8.0

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-1.7.0
Patched versions: Not supplied

Affected versions: *-1.18.0
Patched versions: 1.19.1

Affected versions: *-1.18.0
Patched versions: 1.18.1

Affected versions: *-1.4.9
Patched versions: Not supplied

Original Wordfence record

High

YITH Request a Quote for WooCommerce <= 1.6.3 - Cross-Site Request Forgery

Published: June 30, 2021

Affected versions: *-1.6.3
Patched versions: 1.6.4

Original Wordfence record

MediumCVE-2019-16251

YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change

Published: October 31, 2019

Affected versions: *-1.2.13
Patched versions: 1.2.14

Affected versions: *-1.3.11
Patched versions: 1.3.12

Affected versions: *-1.3.19
Patched versions: 1.3.20

Affected versions: *-1.5.21
Patched versions: 1.5.23

Affected versions: *-1.1.9
Patched versions: 1.2.0

Affected versions: *-1.1.12
Patched versions: 1.1.13

Affected versions: *-1.2.10
Patched versions: 1.2.11

Affected versions: *-1.4.3
Patched versions: 1.4.5

Affected versions: *-1.3.4
Patched versions: 1.3.6

Affected versions: *-1.2.5
Patched versions: 1.2.6

Affected versions: *-1.0.10
Patched versions: 1.0.12

Affected versions: *-2.2.13
Patched versions: 2.2.14

Affected versions: *-2.0.1
Patched versions: 2.0.2

Affected versions: *-1.1.6
Patched versions: 1.1.8

Affected versions: *-2.3.13
Patched versions: 2.3.15

Affected versions: *-1.8.11
Patched versions: 1.8.13

Affected versions: *-1.6.9
Patched versions: 1.7.1

Affected versions: *-2.1.3
Patched versions: 2.1.4

Affected versions: *-1.1.1
Patched versions: 1.1.13

Affected versions: *-1.1.11
Patched versions: 1.1.13

Affected versions: *-3.4.0
Patched versions: 3.4.1

Affected versions: *-1.1.9
Patched versions: 1.2.1

Affected versions: *-1.1.15
Patched versions: 1.1.17

Affected versions: *-1.4.7
Patched versions: 1.4.9

Affected versions: *-1.3.9
Patched versions: 1.3.11

Affected versions: *-1.2.12
Patched versions: 1.2.13

Affected versions: *-1.3.6
Patched versions: 1.3.7

Affected versions: *-1.3.7
Patched versions: 1.3.8

Affected versions: *-1.3.4
Patched versions: 1.3.6

Affected versions: *-1.7.4
Patched versions: 1.7.5

Affected versions: *-1.3.11
Patched versions: 1.3.13

Affected versions: *-1.2.7
Patched versions: 1.2.8

Affected versions: [*, 1.6.3)
Patched versions: 1.6.3

Affected versions: *-1.3.13
Patched versions: 1.3.15

Affected versions: *-1.3.9
Patched versions: 1.4.0

Affected versions: *-1.2.10
Patched versions: 1.2.11

Affected versions: *-1.3.2
Patched versions: 1.3.4

Affected versions: *-1.3.4
Patched versions: 1.3.6

Original Wordfence record

Highest-Severity Records

High

YITH Request a Quote for WooCommerce <= 1.6.3 - Cross-Site Request Forgery

Published: June 30, 2021

Affected versions: *-1.6.3
Patched versions: 1.6.4

Original Wordfence record

High

YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization

Published: November 11, 2022

Affected versions: *-1.2.27
Patched versions: Not supplied

Affected versions: *-2.14.0
Patched versions: 2.15.0

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-2.10.0
Patched versions: 2.11.0

Affected versions: *-2.15.0
Patched versions: 2.16.0

Affected versions: *-1.17.0
Patched versions: 1.17.1

Affected versions: *-1.5.0
Patched versions: Not supplied

Affected versions: *-1.2.6
Patched versions: Not supplied

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-2.7.0
Patched versions: 2.8.0

Affected versions: *-1.8.0
Patched versions: Not supplied

Affected versions: *-2.16.0
Patched versions: 2.16.1

Affected versions: *-1.20.0
Patched versions: 1.20.1

Affected versions: *-4.15.0
Patched versions: 4.16.0

Affected versions: *-3.14.0
Patched versions: 3.15.0

Affected versions: *-2.0.17
Patched versions: Not supplied

Affected versions: *-1.9.0
Patched versions: Not supplied

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-2.20.0
Patched versions: 2.20.1

Affected versions: *-1.25.0
Patched versions: 1.25.1

Affected versions: *-1.25.0
Patched versions: 1.25.1

Affected versions: *-2.13.0
Patched versions: 2.14.0

Affected versions: *-2.5.0
Patched versions: Not supplied

Affected versions: *-1.7.0
Patched versions: 1.8.0

Affected versions: *-3.9.0
Patched versions: Not supplied

Affected versions: *-2.5.0
Patched versions: 2.6.0

Affected versions: *-1.16.0
Patched versions: 1.17.0

Affected versions: *-2.15.0
Patched versions: 2.15.1

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-1.6.0
Patched versions: Not supplied

Affected versions: *-2.5.0
Patched versions: 2.6.0

Affected versions: *-2.14.0
Patched versions: 2.15.0

Affected versions: *-1.3.1
Patched versions: Not supplied

Affected versions: *-1.6.1
Patched versions: Not supplied

Affected versions: *-2.0.5
Patched versions: Not supplied

Affected versions: *-1.8.0
Patched versions: Not supplied

Affected versions: *-1.16.0
Patched versions: 1.16.1

Affected versions: *-2.16.0
Patched versions: 2.16.1

Affected versions: *-2.7.0
Patched versions: 2.8.0

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-1.7.0
Patched versions: Not supplied

Affected versions: *-1.18.0
Patched versions: 1.19.1

Affected versions: *-1.18.0
Patched versions: 1.18.1

Affected versions: *-1.4.9
Patched versions: Not supplied

Original Wordfence record

MediumCVE-2026-24366

YITH WooCommerce Request A Quote <= 2.46.0 - Missing Authorization

Published: January 9, 2026

Affected versions: *-2.46.0
Patched versions: 2.46.1

Original Wordfence record

MediumCVE-2019-16251

YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change

Published: October 31, 2019

Affected versions: *-1.2.13
Patched versions: 1.2.14

Affected versions: *-1.3.11
Patched versions: 1.3.12

Affected versions: *-1.3.19
Patched versions: 1.3.20

Affected versions: *-1.5.21
Patched versions: 1.5.23

Affected versions: *-1.1.9
Patched versions: 1.2.0

Affected versions: *-1.1.12
Patched versions: 1.1.13

Affected versions: *-1.2.10
Patched versions: 1.2.11

Affected versions: *-1.4.3
Patched versions: 1.4.5

Affected versions: *-1.3.4
Patched versions: 1.3.6

Affected versions: *-1.2.5
Patched versions: 1.2.6

Affected versions: *-1.0.10
Patched versions: 1.0.12

Affected versions: *-2.2.13
Patched versions: 2.2.14

Affected versions: *-2.0.1
Patched versions: 2.0.2

Affected versions: *-1.1.6
Patched versions: 1.1.8

Affected versions: *-2.3.13
Patched versions: 2.3.15

Affected versions: *-1.8.11
Patched versions: 1.8.13

Affected versions: *-1.6.9
Patched versions: 1.7.1

Affected versions: *-2.1.3
Patched versions: 2.1.4

Affected versions: *-1.1.1
Patched versions: 1.1.13

Affected versions: *-1.1.11
Patched versions: 1.1.13

Affected versions: *-3.4.0
Patched versions: 3.4.1

Affected versions: *-1.1.9
Patched versions: 1.2.1

Affected versions: *-1.1.15
Patched versions: 1.1.17

Affected versions: *-1.4.7
Patched versions: 1.4.9

Affected versions: *-1.3.9
Patched versions: 1.3.11

Affected versions: *-1.2.12
Patched versions: 1.2.13

Affected versions: *-1.3.6
Patched versions: 1.3.7

Affected versions: *-1.3.7
Patched versions: 1.3.8

Affected versions: *-1.3.4
Patched versions: 1.3.6

Affected versions: *-1.7.4
Patched versions: 1.7.5

Affected versions: *-1.3.11
Patched versions: 1.3.13

Affected versions: *-1.2.7
Patched versions: 1.2.8

Affected versions: [*, 1.6.3)
Patched versions: 1.6.3

Affected versions: *-1.3.13
Patched versions: 1.3.15

Affected versions: *-1.3.9
Patched versions: 1.4.0

Affected versions: *-1.2.10
Patched versions: 1.2.11

Affected versions: *-1.3.2
Patched versions: 1.3.4

Affected versions: *-1.3.4
Patched versions: 1.3.6

Original Wordfence record

MediumCVE-2022-44630

YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery

Published: November 11, 2022

Affected versions: *-1.2.27
Patched versions: Not supplied

Affected versions: *-2.14.0
Patched versions: 2.15.0

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-2.10.0
Patched versions: 2.11.0

Affected versions: *-2.15.0
Patched versions: 2.16.0

Affected versions: *-1.17.0
Patched versions: 1.17.1

Affected versions: *-1.5.0
Patched versions: Not supplied

Affected versions: *-1.2.6
Patched versions: Not supplied

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-2.7.0
Patched versions: 2.8.0

Affected versions: *-1.8.0
Patched versions: Not supplied

Affected versions: *-2.16.0
Patched versions: 2.16.1

Affected versions: *-1.20.0
Patched versions: 1.20.1

Affected versions: *-4.15.0
Patched versions: 4.16.0

Affected versions: *-3.14.0
Patched versions: 3.15.0

Affected versions: *-2.0.17
Patched versions: Not supplied

Affected versions: *-1.9.0
Patched versions: Not supplied

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-2.20.0
Patched versions: 2.20.1

Affected versions: *-1.25.0
Patched versions: 1.25.1

Affected versions: *-1.25.0
Patched versions: 1.25.1

Affected versions: *-2.13.0
Patched versions: 2.14.0

Affected versions: *-2.5.0
Patched versions: Not supplied

Affected versions: *-1.7.0
Patched versions: 1.8.0

Affected versions: *-3.9.0
Patched versions: Not supplied

Affected versions: *-2.5.0
Patched versions: 2.6.0

Affected versions: *-1.16.0
Patched versions: 1.17.0

Affected versions: *-2.15.0
Patched versions: 2.15.1

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-1.3.0
Patched versions: Not supplied

Affected versions: *-1.6.0
Patched versions: Not supplied

Affected versions: *-2.5.0
Patched versions: 2.6.0

Affected versions: *-2.14.0
Patched versions: 2.15.0

Affected versions: *-1.3.1
Patched versions: Not supplied

Affected versions: *-1.6.1
Patched versions: Not supplied

Affected versions: *-2.0.5
Patched versions: Not supplied

Affected versions: *-1.8.0
Patched versions: Not supplied

Affected versions: *-1.16.0
Patched versions: 1.16.1

Affected versions: *-2.16.0
Patched versions: 2.16.1

Affected versions: *-2.7.0
Patched versions: 2.8.0

Affected versions: *-1.21.0
Patched versions: 1.21.1

Affected versions: *-1.7.0
Patched versions: Not supplied

Affected versions: *-1.18.0
Patched versions: 1.19.1

Affected versions: *-1.18.0
Patched versions: 1.18.1

Affected versions: *-1.4.9
Patched versions: Not supplied

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory