WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ydn-download
Published
2025-01-16
Title
Download, Downloads – WordPress Download plugin By Edmon <= 1.4.2 - Reflected Cross-Site Scripting
Slug
yds-support-ticket-system
Published
2022-09-12
Title
YDS Support Ticket System <= 1.0 - Cross-Site Request Forgery
Slug
yds-support-ticket-system
Published
2024-12-14
Title
YDS Support Ticket System <= 1.0 - Authenticated (Subscriber+) SQL Injection
Slug
years-since
Published
2025-03-07
Title
Years Since – Timeless <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yeemail
Published
2025-01-07
Title
Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail < 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yellow-pencil-visual-theme-customizer
Published
2019-04-11
Title
YellowPencil Visual CSS Style Editor <= 7.2.0 - Unauthenticated Arbitrary Options Updates
Slug
yellow-pencil-visual-theme-customizer
Published
2022-01-03
Title
Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting
Slug
yellow-pencil-visual-theme-customizer
Published
2023-04-18
Title
YellowPencil Visual CSS Style Editor < 7.5.9 - Admin+ Stored XSS
Slug
yellow-pencil-visual-theme-customizer
Published
2024-08-26
Title
YellowPencil Visual CSS Style Editor < 7.6.4 - Reflected Cross-Site Scripting
Slug
yellow-pencil-visual-theme-customizer
Published
2024-09-30
Title
YellowPencil Visual CSS Style Editor < 7.6.5 - Reflected Cross-Site Scripting
Slug
yellow-yard
Published
2022-07-01
Title
Yellow Yard Searchbar < 2.8.12 - Reflected Cross-Site Scripting
Slug
yellow-yard
Published
2023-02-07
Title
Yellow Yard < 2.8.12 - Contributor+ Stored XSS
Slug
yesno
Published
2021-05-31
Title
Yes/No Chart < 1.0.12 - Authenticated (contributor+) Blind SQL Injection
Slug
yet-another-related-posts-plugin
Published
2015-05-08
Title
YARPP – Yet Another Related Posts Plugin 4.2.4 - CSRF / XSS / RCE
Slug
yet-another-related-posts-plugin
Published
2023-01-19
Title
YARPP - Yet Another Related Posts Plugin < 5.30.3 - Contributor+ Stored XSS
Slug
yet-another-related-posts-plugin
Published
2023-04-18
Title
YARPP - Yet Another Related Posts Plugin < 5.30.5 - Subscriber+ LFI
Slug
yet-another-related-posts-plugin
Published
2023-04-25
Title
YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi
Slug
yet-another-related-posts-plugin
Published
2023-07-17
Title
YARPP < 5.30.4 - Contributor+ Stored Cross-Site Scripting
Slug
yet-another-related-posts-plugin
Published
2024-02-20
Title
YARPP < 5.30.10 - Admin+ Stored XSS
Slug
yet-another-related-posts-plugin
Published
2024-06-18
Title
YARPP – Yet Another Related Posts Plugin < 5.30.10 - Authenticated(Administrator+) Cross-Site Scripting
Slug
yet-another-related-posts-plugin
Published
2024-08-26
Title
YARPP < 5.30.11 - Missing Authorization
Slug
yet-another-stars-rating
Published
2015-07-06
Title
Yet Another Stars Rating <= 0.9.0 - Authenticated Blind SQL Injection
Slug
yet-another-stars-rating
Published
2019-01-27
Title
Yet Another Stars Rating <= 1.8.6 - PHP Object Injection
Slug
yet-another-stars-rating
Published
2022-02-03
Title
Yet Another Stars Rating < 3.0.0 - Reflected Cross-Site Scripting
Slug
yet-another-stars-rating
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius