WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yml-for-yandex-market
Published
2024-02-23
Title
YML for Yandex Market < 4.2.4 - Reflected Cross-Site Scripting
Slug
yml-for-yandex-market
Published
2024-10-01
Title
YML for Yandex Market < 4.7.3 - Reflected Cross-Site Scripting
Slug
yml-for-yandex-market
Published
2026-03-19
Title
YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed Generation
Slug
yml-for-yandex-market
Published
2026-03-23
Title
YML for Yandex Market < 5.3.0 - Authenticated (Shop Manager+) Arbitrary File Deletion
Slug
ymm-search
Published
2025-05-19
Title
Year Make Model Search for WooCommerce < 1.0.12 - Cross-Site Request Forgery
Slug
yo
Published
2026-09-15
Title
Yo 1.1 - 1.3.1 - Unauthenticated SQL Injection via username Parameter
Slug
yoco-payment-gateway
Published
2026-01-06
Title
Yoco Payments < 3.9.1 - Unauthenticated Arbitrary File Read
Slug
yogeta-wp-cloud
Published
2026-09-10
Title
Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Download
Slug
yogo-booking
Published
2025-01-06
Title
YOGO Booking < 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yolink-search
Published
2014-08-01
Title
yolink Search 2.5 - "s" Cross-Site Scripting
Slug
yolink-search
Published
2014-08-01
Title
yolink Search <= 1.1.4 - includes/bulkcrawl.php Multiple Parameter SQL Injection
Slug
yoo-bar
Published
2024-12-11
Title
Top and footer bars for announcements, notifications, advertisements, promotions – YooBar < 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yoo-slider
Published
2022-03-21
Title
Yoo Slider < 2.1.0 - Arbitrary Slider Duplication/Deletion via CSRF
Slug
yoo-slider
Published
2022-03-21
Title
Yoo Slider < 2.1.0 - Contributor+ Stored Cross-Site Scripting
Slug
yoo-slider
Published
2022-04-11
Title
Yoo Slider < 2.1.0 - Arbitrary Slider Creation/Edition via CSRF
Slug
yoo-slider
Published
2022-04-11
Title
Yoo Slider < 2.1.0 - Arbitrary Template Import via CSRF
Slug
yoo-slider
Published
2024-03-29
Title
Yoo Slider < 2.2.0 - Reflected Cross-Site Scripting
Slug
yookassa
Published
2022-07-29
Title
ЮKassa для WooCommerce < 2.3.1 - Subscriber+ Arbitrary Settings Update
Slug
yookassa
Published
2022-07-28
Title
ЮKassa для WooCommerce < 2.3.1 - Arbitrary Settings Update via CSRF
Slug
yookassa
Published
2026-07-22
Title
ЮKassa для WooCommerce < 2.16.2 - Missing Authorization
Slug
yookassa
Published
2026-07-27
Title
ЮKassa для WooCommerce < 2.16.2 - Authenticated (Subscriber+) Information Exposure
Slug
yookassa
Published
2026-10-22
Title
ЮKassa для WooCommerce <= 2.17.3 - Missing Authorization
Slug
yop-poll
Published
2015-07-08
Title
YOP Poll <= 5.7.3 - Reflected Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2017-03-23
Title
YOP Poll <= 5.8.0 - Stored Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2019-02-05
Title
YOP Poll <= 6.0.2 - Cross-Site Scripting (XSS)