WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yabp
Published
2021-09-09
Title
Yet Another bol.com Plugin <= 1.4 - Reflected Cross-Site Scripting
Slug
yada-wiki
Published
2021-06-28
Title
Yada Wiki < 3.4.1 - Contributor+ Stored XSS
Slug
yahoo-updates-for-wordpress
Published
2014-08-01
Title
Yahoo Updates < 1.0 - XSS vulnerabilities in yupdates_application.php
Slug
yamaps
Published
2023-01-17
Title
YaMaps for WordPress Plugin < 0.6.26 - Contributor+ Stored XSS
Slug
yandex-money-button
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
yandex-money-button
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
yandex-money-button
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
yandexnews-feed-by-teplitsa
Published
2023-03-14
Title
Yandex.News Feed by Teplitsa <= 1.12.5 - Admin+ Stored XSS
Slug
yatra
Published
2023-04-19
Title
Yatra < 2.1.15 - Admin+ Stored XSS
Slug
yatri-tools
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
yatri-tools
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
yawpp
Published
2014-09-19
Title
YAWPP < 1.2.2 - SQL Injection
Slug
yawpp
Published
2014-09-19
Title
YAWPP < 1.2.2 - SQL Injection
Slug
yawpp
Published
2015-12-09
Title
YAWPP <= 1.2.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
yaysmtp
Published
2022-07-11
Title
YaySMTP < 2.2.1 - Subscriber+ Logs Disclosure
Slug
yaysmtp
Published
2022-07-11
Title
YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
Slug
yaysmtp
Published
2022-07-18
Title
YaySMTP < 2.2.2 - Admin+ Stored Cross-Site Scripting
Slug
yaysmtp
Published
2022-07-18
Title
YaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site Scripting
Slug
yaysmtp
Published
2023-06-12
Title
YaySMTP < 2.4.6 - Unauthenticated Stored Cross-Site Scripting
Slug
yds-support-ticket-system
Published
2022-09-12
Title
YDS Support Ticket System <= 1.0 - Cross-Site Request Forgery
Slug
yellow-pencil-visual-theme-customizer
Published
2019-04-11
Title
YellowPencil Visual CSS Style Editor <= 7.2.0 - Unauthenticated Arbitrary Options Updates
Slug
yellow-pencil-visual-theme-customizer
Published
2022-01-03
Title
Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting
Slug
yellow-pencil-visual-theme-customizer
Published
2023-04-18
Title
YellowPencil Visual CSS Style Editor < 7.5.9 - Admin+ Stored XSS
Slug
yellow-yard
Published
2022-07-01
Title
Yellow Yard Searchbar < 2.8.12 - Reflected Cross-Site Scripting
Slug
yellow-yard
Published
2023-02-07
Title
Yellow Yard < 2.8.12 - Contributor+ Stored XSS