WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
youzify
Published
2025-01-24
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress < 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
youzify
Published
2025-01-24
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress < 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)
Slug
youzify
Published
2025-12-27
Title
Youzify <= 1.3.5 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
youzify-moderation
Published
2024-03-25
Title
Buddypress Moderation <= 1.2.5 - Unauthenticated Stored Cross-Site Scripting
Slug
yphplista
Published
2024-11-08
Title
yPHPlista <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yphplista
Published
2024-11-22
Title
yPHPlista <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
yr-activity-link
Published
2024-11-08
Title
活动链接推广插件 < 1.2.4 - Contributor+ Stored XSS
Slug
yslider
Published
2025-11-10
Title
YSlider <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
yt-cookie-nonsense
Published
2024-11-08
Title
Cookie Nonsense for YT <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yt-player
Published
2021-09-22
Title
YT Player < 1.4 - Contributor+ Stored Cross-Site Scripting
Slug
yt-player
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
yt-player
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
yummly-rich-recipes
Published
2025-03-24
Title
Yummly Rich Recipes <= 4.2 - Cross-Site Request Forgery
Slug
yummy-recipes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
yumpu-epaper-publishing
Published
2024-05-29
Title
Yumpu ePaper publishing < 3.0.0 - Missing Authorization to PDF Upload, Publishing, and API Key Modification
Slug
yumpu-epaper-publishing
Published
2025-01-08
Title
Yumpu E-Paper publishing < 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yurl-retwitt
Published
2014-12-14
Title
Yurl Retwitt <= 1.4 - Multiple CSRF
Slug
yuzo-related-post
Published
2019-04-10
Title
Yuzo Related Posts < 5.12.94 - Unauthenticated Call Any Action or Update Any Option