PLUGIN SECURITY

Is Yith Woocommerce Catalog Mode safe?

YITH WooCommerce Catalog Mode, a plugin for disabling sales in your e-commerce and turn it into an e-commerce into an online catalogue.

What this plugin does

  • Slug: yith-woocommerce-catalog-mode
  • Author: YITHEMES
  • 60000+ active installs
  • 72/100 rating (44 reviews on wordpress.org)
  • 2545061 all-time downloads
  • On WordPress.org since 2015-02-19

productsthemeswoocommercewoocommerce catalog mode pluginwoocommerce catalog only

Maintenance status

  • Latest known version: 2.57.0
  • Last updated: 2026-08-18 11:00am GMT
  • Tested up to WordPress: 7.1
  • Requires PHP: 8.0+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for Yith Woocommerce Catalog Mode. Reported between 2022 and 2022.

CVE Vulnerability Type Severity Affected Fixed in Published Status
YITH WooCommerce Catalog Mode [yith-woocommerce-catalog-mode] < 2.16.1 Unknown < 2.16.1 2.16.1 2022-11-11 ✓ fixed in latest
CVE-2022-44630 YITH WooCommerce Catalog Mode [yith-woocommerce-catalog-mode] < 2.16.1 Cross-Site Request Forgery (CSRF) Medium 4.6 < 2.16.1 2.16.1 2022-11-11 ✓ fixed in latest
YITH WooCommerce Catalog Mode [yith-woocommerce-catalog-mode] < 2.16.1 Unknown < 2.16.1 2.16.1 ✓ fixed in latest

How to fix it

Keep Yith Woocommerce Catalog Mode updated — 2.57.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.