Plugin icon

YMC Filter

ymc-smart-filter

Vulnerabilities:

7

Last Updated:

June 16, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-06-18
Title
YMC Filter < 3.11.6 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.11.6
CVSS
7.5 (high)
Published
2026-06-05
Title
YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure
Fixed in
Fixed in 3.11.3
CVSS
7.5 (high)
Published
2026-02-20
Title
Filter & Grids < 3.5.2 - Missing Authorization
Fixed in
Fixed in 3.5.2
CVSS
5.3 (medium)
Published
2025-12-12
Title
Filter & Grids < 3.2.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.2.1
CVSS
5.9 (medium)
Published
2024-08-01
Title
Filter & Grids < 2.8.34 - Cross-Site Request Forgery
Fixed in
Fixed in 2.8.34
CVSS
4.3 (medium)
Published
2024-08-01
Title
Filter & Grids < 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 2.9.3
CVSS
6.4 (medium)
Published
2024-06-27
Title
Filter & Grids < 2.8.33 - Unauthenticated LFI
Fixed in
Fixed in 2.8.33
CVSS
9.3 (critical)