WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yt-cookie-nonsense
Published
2024-11-08
Title
Cookie Nonsense for YT <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yt-player
Published
2021-09-22
Title
YT Player < 1.4 - Contributor+ Stored Cross-Site Scripting
Slug
yt-player
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
yt-player
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
yummly-rich-recipes
Published
2025-03-24
Title
Yummly Rich Recipes <= 4.2 - Cross-Site Request Forgery
Slug
yummy-recipes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
yumpu-epaper-publishing
Published
2024-05-29
Title
Yumpu ePaper publishing < 3.0.0 - Missing Authorization to PDF Upload, Publishing, and API Key Modification
Slug
yumpu-epaper-publishing
Published
2025-01-08
Title
Yumpu E-Paper publishing < 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yurl-retwitt
Published
2014-12-14
Title
Yurl Retwitt <= 1.4 - Multiple CSRF
Slug
yuzo-related-post
Published
2019-04-10
Title
Yuzo Related Posts < 5.12.94 - Unauthenticated Call Any Action or Update Any Option