Vulnerability Discovered in YITH WooCommerce Ajax Product Filter< 3.11.1
https://blog.sucuri.netYITH WooCommerce Ajax Product Filter WordPress plugin has 100,000+ active installations and can be used to apply the filters you need to display the correct WooCommerce variations of the products you are looking for on WooCommerce sites. In versions prior to 3.11.1, there is a vulnerability that allows attackers to force victims to execute unwanted actions when theyโre authenticated within their user account.
The issue has been fixed in Version 3.11.1 which is available now from the WordPress Plugin Repo.