WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ymc-smart-filter
Published
2025-12-12
Title
Filter & Grids < 3.2.1 - Unauthenticated SQL Injection
Slug
ymc-states-map
Published
2024-12-13
Title
States Map US <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yml-for-yandex-market
Published
2023-04-17
Title
YML for Yandex Market < 3.10.8 - Reflected XSS
Slug
yml-for-yandex-market
Published
2024-02-23
Title
YML for Yandex Market < 4.2.4 - Reflected Cross-Site Scripting
Slug
yml-for-yandex-market
Published
2024-10-01
Title
YML for Yandex Market < 4.7.3 - Reflected Cross-Site Scripting
Slug
ymm-search
Published
2025-05-19
Title
Year Make Model Search for WooCommerce < 1.0.12 - Cross-Site Request Forgery
Slug
yoco-payment-gateway
Published
2026-01-06
Title
Yoco Payments < 3.9.1 - Unauthenticated Arbitrary File Read
Slug
yogo-booking
Published
2025-01-06
Title
YOGO Booking < 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yolink-search
Published
2014-08-01
Title
yolink Search 2.5 - "s" Cross-Site Scripting
Slug
yolink-search
Published
2014-08-01
Title
yolink Search <= 1.1.4 - includes/bulkcrawl.php Multiple Parameter SQL Injection
Slug
yoo-bar
Published
2024-12-11
Title
Top and footer bars for announcements, notifications, advertisements, promotions – YooBar < 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yoo-slider
Published
2022-03-21
Title
Yoo Slider < 2.1.0 - Arbitrary Slider Duplication/Deletion via CSRF
Slug
yoo-slider
Published
2022-03-21
Title
Yoo Slider < 2.1.0 - Contributor+ Stored Cross-Site Scripting
Slug
yoo-slider
Published
2022-04-11
Title
Yoo Slider < 2.1.0 - Arbitrary Slider Creation/Edition via CSRF
Slug
yoo-slider
Published
2022-04-11
Title
Yoo Slider < 2.1.0 - Arbitrary Template Import via CSRF
Slug
yoo-slider
Published
2024-03-29
Title
Yoo Slider < 2.2.0 - Reflected Cross-Site Scripting
Slug
yookassa
Published
2022-07-29
Title
ЮKassa для WooCommerce < 2.3.1 - Subscriber+ Arbitrary Settings Update
Slug
yookassa
Published
2022-07-28
Title
ЮKassa для WooCommerce < 2.3.1 - Arbitrary Settings Update via CSRF
Slug
yop-poll
Published
2015-07-08
Title
YOP Poll <= 5.7.3 - Reflected Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2017-03-23
Title
YOP Poll <= 5.8.0 - Stored Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2019-02-05
Title
YOP Poll <= 6.0.2 - Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2020-04-24
Title
YOP Poll < 6.1.5 - Authenticated Stored XSS
Slug
yop-poll
Published
2021-06-17
Title
YOP Poll < 6.2.8 - Unauthenticated Stored Cross-Site Scripting
Slug
yop-poll
Published
2021-10-15
Title
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options Module
Slug
yop-poll
Published
2021-10-15
Title
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module