WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yourchannel
Published
2023-01-13
Title
YourChannel < 1.2.2 - Subscriber+ Stored XSS
Slug
yourchannel
Published
2023-04-05
Title
YourChannel < 1.2.4 - Unauthenticated Settings Reset
Slug
yourchannel
Published
2023-04-05
Title
YourChannel < 1.2.6 - Admin+ Stored XSS
Slug
yourchannel
Published
2023-04-05
Title
YourChannel < 1.2.5 - Multiple CSRF
Slug
yournewsapp
Published
2025-10-02
Title
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection
Slug
yournewsapp
Published
2025-07-23
Title
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Reflected Cross-Site Scripting
Slug
yourplugins-wc-conditional-cart-notices
Published
2025-09-26
Title
Conditional Cart Messages for WooCommerce – YourPlugins.com <= 1.2.10 - Cross-Site Request Forgery
Slug
yousaytoo-auto-publishing-plugin
Published
2012-01-09
Title
Yousaytoo Auto Publishing <= 1.0 - Cross Site Scripting
Slug
youtube-channel
Published
2023-01-11
Title
YouTube Channel < 3.23.0 - Contributor+ Stored XSS via Shortcode
Slug
youtube-channel
Published
2023-01-04
Title
My YouTube Channel < 3.23.0 - Admin+ Stored XSS
Slug
youtube-channel-gallery
Published
2023-01-18
Title
Youtube Channel Gallery <= 2.4 - Contributor+ Stored XSS via Shortcode
Slug
youtube-embed
Published
2015-08-26
Title
YouTube Embed < 3.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
youtube-embed
Published
2021-07-19
Title
YouTube Embed < 5.2.2 - Contributor+ Stored XSS
Slug
youtube-embed
Published
2025-04-09
Title
YouTube Embed < 5.4 - Admin+ Stored XSS
Slug
youtube-embed
Published
2025-12-22
Title
YouTube Embed <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
youtube-embed-plus
Published
2017-07-25
Title
YouTube Embed <= 11.8.1 - Cross-Site Request Forgery (CSRF)
Slug
youtube-feeder
Published
2021-07-30
Title
Youtube Feeder <= 2.0.1 - CSRF to Stored XSS
Slug
youtube-playlist-player
Published
2023-05-23
Title
YouTube Playlist Player < 4.6.5 - Cross-Site Request Forgery (CSRF)
Slug
youtube-playlist-player
Published
2023-10-18
Title
YouTube Playlist Player < 4.6.8 - Contributor+ Stored XSS
Slug
youtube-shortcode
Published
2023-01-19
Title
Youtube Shortcode <= 1.8.5 - Contributor+ Stored XSS
Slug
youtube-showcase
Published
2023-08-16
Title
Video Gallery & Management < 3.3.6 - Settings Update via CSRF
Slug
youtube-showcase
Published
2024-05-20
Title
YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress < 3.4.0 - Missing Authorization to Arbitrary Post/Page Creation
Slug
youtube-showcase
Published
2025-08-25
Title
YouTube Showcase < 3.5.2 - Unauthenticated PHP Object Injection
Slug
youtube-showcase
Published
2025-09-23
Title
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
youtube-simple-gallery
Published
2025-06-05
Title
YouTube Simple Gallery <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting