HIGH Published Oct 10, 2026

CVE-2026-106606

CVE-2026-106606 published: Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0.

View full NVD advisory → ← Back to CVE watch

CVE-2026-106606

Related reading