CVE-2026-28169: WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions.

Affected Software

1 affected component

WordPress/YITH WooCommerce Zoom Magnifier<=2.52.0

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress YITH WooCommerce Zoom Magnifier to a version that resolves this vulnerability.
Fixed in 2.52.1

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

The severity of CVE-2026-28169 is categorized as medium with a score of 5.3.

CVE-2026-28169 affects the YITH WooCommerce Zoom Magnifier plugin versions up to 2.52.0.

To fix CVE-2026-28169, update the YITH WooCommerce Zoom Magnifier plugin to the latest version above 2.52.0.

CVE-2026-28169 is an unauthenticated sensitive data exposure vulnerability.

The impact of CVE-2026-28169 includes the potential exposure of sensitive data due to improper access controls.