CVE-2026-106606

Name of the Vulnerable Software and Affected Versions YITH WooCommerce Affiliates versions prior to 3.31.0

Description The software contains a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by injecting malicious objects into the deserialization process.

Recommendations Update YITH WooCommerce Affiliates to a version newer than 3.31.0.