WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
youtube-simplegallery
Published
2025-03-28
Title
YouTube SimpleGallery <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
youtube-speedload
Published
2023-11-09
Title
Youtube SpeedLoad <= 0.6.3 - Cross-Site Request Forgery
Slug
youtube-video-inserter
Published
2021-09-09
Title
YouTube Video Inserter <= 1.2.1.0 - Reflected Cross-Site Scripting
Slug
youtube-video-player
Published
2021-06-28
Title
YouTube Embed, Playlist and Popup < 2.3.9 - Contributor+ Stored XSS
Slug
youtube-video-player
Published
2023-01-23
Title
YouTube Embed, Playlist and Popup by WpDevArt < 2.6.4 - Admin+ Stored XSS
Slug
youtube-video-player
Published
2025-07-03
Title
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library
Slug
youtube-widget-responsive
Published
2023-09-19
Title
Widget Responsive for Youtube < 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
youzify
Published
2021-06-28
Title
Youzify < 1.0.7 - Stored Cross-Site Scripting via Biography
Slug
youzify
Published
2022-07-11
Title
Youzify < 1.2.0 - Unauthenticated SQLi
Slug
youzify
Published
2023-01-24
Title
Youzify < 1.2.2 - Contributor+ Stored XSS
Slug
youzify
Published
2023-11-03
Title
Youzify < 1.2.3 - Insecure Direct Object Reference
Slug
youzify
Published
2024-07-04
Title
Youzify < 1.2.6 - Authenticated (Contributor+) SQL Injection
Slug
youzify
Published
2024-06-19
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress < 1.2.6 - Authenticated (Contributor+) SQL Injection
Slug
youzify
Published
2024-07-24
Title
Youzify < 1.2.8 - Missing Authorization
Slug
youzify
Published
2024-10-09
Title
Youzify < 1.3.1 - Subscriber+ Arbitrary Attachment Deletion
Slug
youzify
Published
2024-10-09
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode
Slug
youzify
Published
2025-01-24
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs < 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion
Slug
youzify
Published
2025-01-24
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress < 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
youzify
Published
2025-01-24
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress < 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)
Slug
youzify
Published
2025-12-27
Title
Youzify <= 1.3.5 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
youzify-moderation
Published
2024-03-25
Title
Buddypress Moderation <= 1.2.5 - Unauthenticated Stored Cross-Site Scripting
Slug
yphplista
Published
2024-11-08
Title
yPHPlista <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yphplista
Published
2024-11-22
Title
yPHPlista <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
yr-activity-link
Published
2024-11-08
Title
活动链接推广插件 < 1.2.4 - Contributor+ Stored XSS
Slug
yslider
Published
2025-11-10
Title
YSlider <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting