WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yawpp
Published
2014-09-19
Title
YAWPP < 1.2.2 - SQL Injection
Slug
yawpp
Published
2014-09-19
Title
YAWPP < 1.2.2 - SQL Injection
Slug
yawpp
Published
2015-12-09
Title
YAWPP <= 1.2.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
yaycurrency
Published
2025-09-26
Title
YayCurrency <= 3.3.1 - Admin+ Remote Code Execution
Slug
yayextra
Published
2024-08-02
Title
YayExtra – WooCommerce Extra Product Options < 1.3.8 - Unauthenticated Arbitrary File Upload via handle_upload_file Function
Slug
yayextra
Published
2025-03-31
Title
YayExtra < 1.5.3 - Missing Authorization
Slug
yayextra
Published
2025-07-16
Title
YayExtra < 1.5.6 - Authenticated (Administrator+) SQL Injection
Slug
yayforms
Published
2025-02-18
Title
Yay! Forms | Embed Custom Forms, Surveys, and Quizzes Easily < 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yaypricing
Published
2025-08-29
Title
YayPricing < 3.5.4 - Missing Authorization
Slug
yaysmtp
Published
2022-07-11
Title
YaySMTP < 2.2.1 - Subscriber+ Logs Disclosure
Slug
yaysmtp
Published
2022-07-11
Title
YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
Slug
yaysmtp
Published
2022-07-18
Title
YaySMTP < 2.2.2 - Admin+ Stored Cross-Site Scripting
Slug
yaysmtp
Published
2022-07-18
Title
YaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site Scripting
Slug
yaysmtp
Published
2023-06-12
Title
YaySMTP < 2.4.6 - Unauthenticated Stored Cross-Site Scripting
Slug
yaysmtp
Published
2025-02-18
Title
YaySMTP 2.4.9 - 2.6.3 - Unauthenticated Stored Cross-Site Scripting
Slug
yaysmtp
Published
2025-05-07
Title
YaySMTP < 2.6.5 - Authenticated (Administrator+) SQL Injection
Slug
yaysmtp
Published
2025-06-27
Title
YaySMTP < 2.6.7 - Admin+ SQL Injection
Slug
ycontributors
Published
2025-07-03
Title
yContributors <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ycyclista
Published
2025-01-16
Title
yCyclista <= 1.2.3 - Reflected Cross-Site Scripting
Slug
ydn-download
Published
2025-01-16
Title
Download, Downloads – WordPress Download plugin By Edmon <= 1.4.2 - Reflected Cross-Site Scripting
Slug
yds-support-ticket-system
Published
2022-09-12
Title
YDS Support Ticket System <= 1.0 - Cross-Site Request Forgery
Slug
yds-support-ticket-system
Published
2024-12-14
Title
YDS Support Ticket System <= 1.0 - Authenticated (Subscriber+) SQL Injection
Slug
years-since
Published
2025-03-07
Title
Years Since – Timeless <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yeemail
Published
2025-01-07
Title
Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail < 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yellow-pencil-visual-theme-customizer
Published
2019-04-11
Title
YellowPencil Visual CSS Style Editor <= 7.2.0 - Unauthenticated Arbitrary Options Updates