WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yop-poll
Published
2020-01-15
Title
YOP Poll < 6.1.2 - Reflected Cross-Site Scripting
Slug
yop-poll
Published
2022-02-14
Title
YOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting
Slug
yop-poll
Published
2022-07-11
Title
YOP Poll < 6.4.3 - IP Spoofing
Slug
yop-poll
Published
2023-11-13
Title
YOP Poll < 6.5.27 - Unauthenticated Vote Manipulation via Race Condition
Slug
yop-poll
Published
2023-10-24
Title
YOP Poll < 6.5.29 - Reusable Captcha via validateImage
Slug
yop-poll
Published
2025-10-12
Title
YOP Poll < 6.5.38 - Unauthenticated Stored Cross-Site Scripting
Slug
yop-poll
Published
2025-11-02
Title
YOP Poll < 6.5.39 - Missing Authorization
Slug
yotpo-reviews-for-woocommerce
Published
2022-08-01
Title
Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRF
Slug
yotpo-social-reviews-for-woocommerce
Published
2024-11-14
Title
Yotpo: Product & Photo Reviews for WooCommerce < 1.7.10 - Reflected Cross-Site Scripting
Slug
yottie-lite
Published
2025-02-13
Title
Elfsight Yottie Lite <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
yotuwp-easy-youtube-embed
Published
2023-07-07
Title
Video Gallery < 1.3.13 - Admin+ Stored XSS
Slug
yotuwp-easy-youtube-embed
Published
2024-06-14
Title
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP < 1.3.14 - Unauthenticated Local File Inclusion
Slug
yotuwp-easy-youtube-embed
Published
2024-06-14
Title
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP < 1.3.14 - Authenticated (Contributor+) Arbitrary File Inclusion via Shortcode
Slug
you-shang
Published
2021-07-30
Title
You Shang <= 1.0.1 - Authenticated Stored Cross-Site Scripting
Slug
youforms-free-for-copecart
Published
2021-07-30
Title
youForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site Scripting
Slug
yougler-blogger-profile-page
Published
2025-06-13
Title
Yougler Blogger Profile Page <= v1.01 - Cross-Site Request Forgery to Settings Update
Slug
youmax-channel-embeds-for-youtube-businesses
Published
2024-12-12
Title
Youtube Video Grid <= 1.9 - Cross-Site Request Forgery
Slug
youmax-channel-embeds-for-youtube-businesses
Published
2025-01-16
Title
Youtube Video Grid | Youmax <= 1.9 - Reflected Cross-Site Scripting
Slug
youneeq-panel
Published
2024-11-18
Title
Youneeq Recommendations <= 3.0.7 - Reflected Cross-Site Scripting
Slug
your-lightbox
Published
2025-03-19
Title
Your Lightbox <= 1.0 - Reflected Cross-Site Scripting
Slug
your-simple-svg-support
Published
2025-03-24
Title
Your Simple SVG Support < 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
your-text-manager
Published
2014-08-01
Title
Your Text Manager < 0.3.0 - Cross-Site Scripting (XSS)
Slug
youram-youtube-embed
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
youram-youtube-embed
Published
2025-07-28
Title
YouTube Embed <= 10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via instance Parameter
Slug
yourchannel
Published
2023-01-10
Title
YourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via Shortcode