WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yet-another-stars-rating
Published
2019-01-27
Title
Yet Another Stars Rating <= 1.8.6 - PHP Object Injection
Slug
yet-another-stars-rating
Published
2022-02-03
Title
Yet Another Stars Rating < 3.0.0 - Reflected Cross-Site Scripting
Slug
yet-another-stars-rating
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
yet-another-stars-rating
Published
2023-03-03
Title
Yet Another Stars Rating < 3.1.3 - Subscriber+ Stored XSS
Slug
yet-another-stars-rating
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
yet-another-stars-rating
Published
2023-11-27
Title
Yet Another Stars Rating < 3.4.4 - Missing Authorization via init
Slug
yet-another-stars-rating
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
yet-another-webclap-for-wordpress
Published
2025-12-05
Title
Yet Another WebClap for WordPress <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
yext
Published
2025-09-26
Title
Yext <= 1.1.3 - Missing Authorization
Slug
yikes-inc-easy-custom-woocommerce-product-tabs
Published
2022-06-28
Title
Custom Product Tabs for WooCommerce < 1.7.8 - Unauthenticated Toggle Content Setting Update
Slug
yikes-inc-easy-custom-woocommerce-product-tabs
Published
2022-11-30
Title
Custom Product Tabs for WooCommerce < 1.8.0 - Admin+ Stored XSS
Slug
yikes-inc-easy-custom-woocommerce-product-tabs
Published
2025-01-06
Title
Custom Product Tabs for WooCommerce <= 1.8.5 - Shop Manager+ PHP Object Injection
Slug
yikes-inc-easy-mailchimp-extender
Published
2014-09-18
Title
Easy Forms for MailChimp 5.0.3 - classes/class.yksemeBase.php Multiple Actions CSRF
Slug
yikes-inc-easy-mailchimp-extender
Published
2014-10-06
Title
Easy Forms for MailChimp 3.0 - 5.0.6 Stored XSS
Slug
yikes-inc-easy-mailchimp-extender
Published
2016-07-13
Title
Easy Forms for MailChimp < 6.1 - Local File Inclusion (LFI)
Slug
yikes-inc-easy-mailchimp-extender
Published
2019-07-01
Title
Easy Forms for Mailchimp < 6.5.3 - Code Injection
Slug
yikes-inc-easy-mailchimp-extender
Published
2020-02-26
Title
Easy Forms for Mailchimp < 6.6.3 - Authenticated Cross-Site Scripting (XSS)
Slug
yikes-inc-easy-mailchimp-extender
Published
2021-12-21
Title
Easy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site Scripting
Slug
yikes-inc-easy-mailchimp-extender
Published
2023-03-27
Title
Easy Forms for MailChimp < 6.8.7 - Contributor+ Stored XSS
Slug
yikes-inc-easy-mailchimp-extender
Published
2023-03-29
Title
Easy Forms for MailChimp < 6.8.8 - Reflected XSS
Slug
yikes-inc-easy-mailchimp-extender
Published
2023-03-09
Title
Easy Forms for MailChimp < 6.8.9 - Admin+ Stored XSS
Slug
yikes-inc-easy-mailchimp-extender
Published
2023-05-22
Title
Easy Forms for Mailchimp < 6.8.9 - Reflected XSS
Slug
yikes-inc-easy-mailchimp-extender
Published
2023-12-21
Title
Easy Forms for Mailchimp < 6.9.0 - Admin+ Stored Cross-Site Scripting
Slug
yikes-inc-easy-mailchimp-extender
Published
2024-02-12
Title
Easy Forms for Mailchimp <= 6.9.0 - Sensitive Information Exposure via logfile
Slug
yikes-inc-easy-mailchimp-extender
Published
2024-06-06
Title
Easy Forms for Mailchimp <= 6.9.0 - Missing Authorization