WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
youneeq-panel
Published
2024-11-18
Title
Youneeq Recommendations <= 3.0.7 - Reflected Cross-Site Scripting
Slug
your-lightbox
Published
2025-03-19
Title
Your Lightbox <= 1.0 - Reflected Cross-Site Scripting
Slug
your-simple-svg-support
Published
2025-03-24
Title
Your Simple SVG Support < 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
your-text-manager
Published
2014-08-01
Title
Your Text Manager < 0.3.0 - Cross-Site Scripting (XSS)
Slug
youram-youtube-embed
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
youram-youtube-embed
Published
2025-07-28
Title
YouTube Embed <= 10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via instance Parameter
Slug
yourchannel
Published
2023-01-10
Title
YourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via Shortcode
Slug
yourchannel
Published
2023-01-13
Title
YourChannel < 1.2.2 - Subscriber+ Stored XSS
Slug
yourchannel
Published
2023-04-05
Title
YourChannel < 1.2.4 - Unauthenticated Settings Reset
Slug
yourchannel
Published
2023-04-05
Title
YourChannel < 1.2.6 - Admin+ Stored XSS
Slug
yourchannel
Published
2023-04-05
Title
YourChannel < 1.2.5 - Multiple CSRF
Slug
yournewsapp
Published
2025-10-02
Title
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection
Slug
yournewsapp
Published
2025-07-23
Title
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Reflected Cross-Site Scripting
Slug
yourplugins-wc-conditional-cart-notices
Published
2025-09-26
Title
Conditional Cart Messages for WooCommerce – YourPlugins.com <= 1.2.10 - Cross-Site Request Forgery
Slug
yousaytoo-auto-publishing-plugin
Published
2012-01-09
Title
Yousaytoo Auto Publishing <= 1.0 - Cross Site Scripting
Slug
youtube-channel
Published
2023-01-11
Title
YouTube Channel < 3.23.0 - Contributor+ Stored XSS via Shortcode
Slug
youtube-channel
Published
2023-01-04
Title
My YouTube Channel < 3.23.0 - Admin+ Stored XSS
Slug
youtube-channel-gallery
Published
2023-01-18
Title
Youtube Channel Gallery <= 2.4 - Contributor+ Stored XSS via Shortcode
Slug
youtube-embed
Published
2015-08-26
Title
YouTube Embed < 3.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
youtube-embed
Published
2021-07-19
Title
YouTube Embed < 5.2.2 - Contributor+ Stored XSS
Slug
youtube-embed
Published
2025-04-09
Title
YouTube Embed < 5.4 - Admin+ Stored XSS
Slug
youtube-embed
Published
2025-12-22
Title
YouTube Embed <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
youtube-embed-plus
Published
2017-07-25
Title
YouTube Embed <= 11.8.1 - Cross-Site Request Forgery (CSRF)
Slug
youtube-feed-pro
Published
2026-01-16
Title
Feeds for YouTube Pro < 2.6.1 - Unauthenticated Arbitrary File Read via Path Traversal
Slug
youtube-feeder
Published
2021-07-30
Title
Youtube Feeder <= 2.0.1 - CSRF to Stored XSS