PLUGIN SECURITY
Is Yith Woocommerce Ajax Navigation safe?
YITH WooCommerce Ajax Product Filter offers you the perfect way to filter all products of your WooCommerce shop.
What this plugin does
- Slug:
yith-woocommerce-ajax-navigation - Author: YITHEMES
- 70000+ active installs
- 70/100 rating (98 reviews on wordpress.org)
- 5125958 all-time downloads
- On WordPress.org since 2013-06-24
ajax product filterproduct filtershop filterwoocommerce filterwoocommerce product filter
Maintenance status
- Latest known version: 5.22.0
- Last updated: 2026-07-21 12:52pm GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 8.0+
Known vulnerabilities
2 known CVEs on file for Yith Woocommerce Ajax Navigation. Reported between 2020 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-37943 | YITH WooCommerce Ajax Product Filter [yith-woocommerce-ajax-navigation] < 5.2.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.8 | < 5.2.0 | 5.2.0 | 2024-07-10 | ✓ fixed in latest |
| — | YITH WooCommerce Ajax Product Filter [yith-woocommerce-ajax-navigation] < 4.16.0 | — | Unknown | < 4.16.0 | 4.16.0 | 2022-11-11 | ✓ fixed in latest |
| CVE-2022-44630 | YITH WooCommerce Ajax Product Filter [yith-woocommerce-ajax-navigation] < 4.16.0 | Cross-Site Request Forgery (CSRF) | Medium 4.6 | < 4.16.0 | 4.16.0 | 2022-11-11 | ✓ fixed in latest |
| — | YITH WooCommerce Ajax Product Filter [yith-woocommerce-ajax-navigation] < 3.11.1 | — | Unknown | < 3.11.1 | 3.11.1 | 2020-06-22 | ✓ fixed in latest |
| — | YITH WooCommerce Ajax Product Filter [yith-woocommerce-ajax-navigation] < 3.11.1 | — | Unknown | < 3.11.1 | 3.11.1 | 2020-06-22 | ✓ fixed in latest |
| — | YITH WooCommerce Ajax Product Filter [yith-woocommerce-ajax-navigation] < 3.11.1 | — | Unknown | < 3.11.1 | 3.11.1 | — | ✓ fixed in latest |
| — | YITH WooCommerce Ajax Product Filter [yith-woocommerce-ajax-navigation] < 4.16.0 | — | Unknown | < 4.16.0 | 4.16.0 | — | ✓ fixed in latest |
| — | YITH WooCommerce Ajax Product Filter < 3.11.1 - Authenticated Reflected Cross-Site Scripting (XSS) | — | Unknown | < 3.11.1 | 3.11.1 | — | ✓ fixed in latest |
How to fix it
Keep Yith Woocommerce Ajax Navigation updated — 5.22.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- HUSKY – Products Filter for WooCommerce Professional — 80000+ active installs — 92/100 (336)
- Filter Everything — WordPress & WooCommerce Filters — 50000+ active installs — 90/100 (148) — max PHP 8.4
- Themify – WooCommerce Product Filter — 20000+ active installs — 70/100 (72) — max PHP 8.4
- WCAPF – Ajax Product Filter for WooCommerce — 8000+ active installs — 86/100 (44)
- Category AJAX Filter – Posts, Custom Post Types & Product Filter — 6000+ active installs — 98/100 (153)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.