YITH WooCommerce Product Add-Ons

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ domagron

   1.1y ago

   The ability to filter by variant doesn’t work. The search base gets hung up and returns no values. I tried to resolve this through a case with them, but it has been outstanding for almost a year. I even created a sandbox so they could do some testing and provided them credentials several times. It takes a day or two between each email. Customer service is awful and the plugin lackluster.

   Read on wp.org ↗
2. ★★★★★ Rik

   1.5y ago

   i was looking for a plugin that allowed adding fields, that when selected, increase the price.All i can do is add a field, but there’s no option to enter a price for the field.

   Read on wp.org ↗
3. ★★★★★ aftertomorrow

   1.7y ago

   Don’t use this! After update to Version 4.16.0, I got critical error on my webpage and my website is down!

   Read on wp.org ↗
4. ★★★★★ smcmdt

   1.8y ago

   It’s very good, I’m just learning how to use it but so far so good. This topic was modified 1 year, 8 months ago by smcmdt.

   Read on wp.org ↗
5. ★★★★★ alemartinventa

   1.9y ago

   it stopped working one week ago updating addons price on cart, and they do not even reply about the problem. I updated to 4.14.1 and it STILL is not fixed This topic was modified 1 year, 9 months ago by alemartinventa.

   Read on wp.org ↗
6. ★★★★★ orensomething

   2.1y ago

   simply, cause you dont have to create hundreds or even thousands of variations. no need. saved me months of work. my client has pages with 7-8 variations, each variation has 3-5 options. thats easily thousands of variations per product. Yith solving it in a very smooth way.

   Read on wp.org ↗
7. ★★★★★ hoogy84

   2.1y ago

   Thanks to your great support, we’re able to get the plugin to appear where we wanted it.

   Read on wp.org ↗
8. ★★★★★ Christian Rassin

   2.2y ago

   For being a free plugin, it’s outrageously huge in functionality. Ik think most shopt will have enough using the free version. Just now I had an issue with an update and the Support team helped quicly and professionaly. We are thinking about bying the full version for 120 euro per year if we really need it. On its own it’s a great plugin I think every online shop owner needs to make the product options a whole lot better.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.32.0 New: support for WooCommerce 11.0 Update: YITH plugin framework 4.32.0
2. — Version 4.31.0 New: support for WooCommerce 10.9 Update: YITH plugin framework 4.31.0
3. — Version 4.30.0 New: support for WooCommerce 10.8 Update: YITH plugin framework 4.30.0
4. — Version 4.29.1 Fix: fixed SQL Injection vulnerability Update: YITH plugin framework 4.29.1
5. — Version 4.29.0 New: support for WooCommerce 10.7 New: support for WordPress 7.0 Update: YITH plugin framework 4.29.0
6. — Version 4.28.0 New: support for WooCommerce 10.6 Update: YITH plugin framework 4.28.0

10 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.9 YITH WooCommerce Product Add-Ons <= 4.29.0 - Authenticated (Shop manager+) SQL Injection ↗
   2026-05-20 CVE-2026-42383 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.29.0 Patched in 4.29.1
2. Medium · 6.1 YITH WooCommerce Product Add-Ons <= 4.14.1 - Reflected Cross-Site Scripting ↗
   2024-10-24 CVE-2024-50448 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.14.1 Patched in 4.14.2
3. Medium · 6.1 YITH WooCommerce Product Add-Ons <= 4.13.0 - Reflected Cross-Site Scripting ↗
   2024-09-30 CVE-2024-47367 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.13.0 Patched in 4.13.1
4. Medium · 5.3 YITH WooCommerce Product Add-Ons <= 4.9.2 - Unauthenticated Content Injection ↗
   2024-06-06 CVE-2024-35680 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Affects <= 4.9.2 Patched in 4.9.3
5. Medium · 6.1 YITH WooCommerce Product Add-Ons <= 4.5.0 - Unuathenticated Cross-Site Scripting ↗
   2024-03-15 CVE-2024-27994 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.5.0 Patched in 4.6.0
6. Medium · 6.6 YITH WooCommerce Product Add-Ons <= 4.3.0 - Authenticated(Shop Manager+) PHP Object Injection ↗
   2023-12-28 CVE-2023-49777 Deserialization of Untrusted Data Affects < 4.3.1 Patched in 4.3.1
7. Medium · 5.3 YITH WooCommerce Product Add-Ons <= 4.2.0 - Missing Authorization ↗
   2023-10-25 CVE-2023-46635 Missing Authorization Affects <= 4.2.0 Patched in 4.2.1
8. High · 7.1 YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization ↗
   2022-11-11 Missing Authorization Affects <= 2.15.0 Patched in 2.16.0
9. Medium · 4.3 YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery ↗
   2022-11-11 CVE-2022-44630 Cross-Site Request Forgery (CSRF) Affects <= 2.15.0 Patched in 2.16.0
10. Medium · 4.3 YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change ↗
    2019-10-31 CVE-2019-16251 Missing Authorization Affects <= 1.5.21 Patched in 1.5.23

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 12 languages, 5 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-12-13 10K+ → 20K+ up after 1 days in tier
2. 2024-12-12 20K+ → 10K+ down after 50 days in tier
3. 2024-10-23 10K+ → 20K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Product Addons for Woocommerce – Product Options with Custom Fields 30K+ installs · 4.9★ · 4 shared tags A
• Extra Product Options for WooCommerce 600+ installs · 4.0★ · 3 shared tags B
• Conditional Logic for Woo Product Add-ons 400+ installs · 3.9★ · 3 shared tags B
• Extra Product Options (Custom Addons) for WooCommerce 100+ installs · 4.1★ · 3 shared tags C
• Advanced Product Fields (Product Addons) for WooCommerce 50K+ installs · 4.7★ · 2 shared tags A
• Extra Product Options For WooCommerce | Custom Product Addons and Fields 30K+ installs · 4.8★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for YITH WooCommerce Product Add-Ons into a readme, a review or a deck. It updates itself.

YITH WooCommerce Product Add-Ons: 20K+ active installs, 3.7★ (57 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/yith-woocommerce-product-add-ons