WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yop-poll
Published
2015-07-08
Title
YOP Poll <= 5.7.3 - Reflected Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2017-03-23
Title
YOP Poll <= 5.8.0 - Stored Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2019-02-05
Title
YOP Poll <= 6.0.2 - Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2020-04-24
Title
YOP Poll < 6.1.5 - Authenticated Stored XSS
Slug
yop-poll
Published
2021-06-17
Title
YOP Poll < 6.2.8 - Unauthenticated Stored Cross-Site Scripting
Slug
yop-poll
Published
2021-10-15
Title
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options Module
Slug
yop-poll
Published
2021-10-15
Title
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module
Slug
yop-poll
Published
2020-01-15
Title
YOP Poll < 6.1.2 - Reflected Cross-Site Scripting
Slug
yop-poll
Published
2022-02-14
Title
YOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting
Slug
yop-poll
Published
2022-07-11
Title
YOP Poll < 6.4.3 - IP Spoofing
Slug
yop-poll
Published
2023-11-13
Title
YOP Poll < 6.5.27 - Unauthenticated Vote Manipulation via Race Condition
Slug
yop-poll
Published
2023-10-24
Title
YOP Poll < 6.5.29 - Reusable Captcha via validateImage
Slug
yop-poll
Published
2025-10-12
Title
YOP Poll < 6.5.38 - Unauthenticated Stored Cross-Site Scripting
Slug
yop-poll
Published
2025-11-02
Title
YOP Poll < 6.5.39 - Missing Authorization
Slug
yotpo-reviews-for-woocommerce
Published
2022-08-01
Title
Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRF
Slug
yotpo-social-reviews-for-woocommerce
Published
2024-11-14
Title
Yotpo: Product & Photo Reviews for WooCommerce < 1.7.10 - Reflected Cross-Site Scripting
Slug
yottie-lite
Published
2025-02-13
Title
Elfsight Yottie Lite <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
yotuwp-easy-youtube-embed
Published
2023-07-07
Title
Video Gallery < 1.3.13 - Admin+ Stored XSS
Slug
yotuwp-easy-youtube-embed
Published
2024-06-14
Title
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP < 1.3.14 - Unauthenticated Local File Inclusion
Slug
yotuwp-easy-youtube-embed
Published
2024-06-14
Title
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP < 1.3.14 - Authenticated (Contributor+) Arbitrary File Inclusion via Shortcode
Slug
you-shang
Published
2021-07-30
Title
You Shang <= 1.0.1 - Authenticated Stored Cross-Site Scripting
Slug
youforms-free-for-copecart
Published
2021-07-30
Title
youForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site Scripting
Slug
yougler-blogger-profile-page
Published
2025-06-13
Title
Yougler Blogger Profile Page <= v1.01 - Cross-Site Request Forgery to Settings Update
Slug
youmax-channel-embeds-for-youtube-businesses
Published
2024-12-12
Title
Youtube Video Grid <= 1.9 - Cross-Site Request Forgery
Slug
youmax-channel-embeds-for-youtube-businesses
Published
2025-01-16
Title
Youtube Video Grid | Youmax <= 1.9 - Reflected Cross-Site Scripting