WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yolink-search
Published
2014-08-01
Title
yolink Search 2.5 - "s" Cross-Site Scripting
Slug
yolink-search
Published
2014-08-01
Title
yolink Search <= 1.1.4 - includes/bulkcrawl.php Multiple Parameter SQL Injection
Slug
yoo-bar
Published
2024-12-11
Title
Top and footer bars for announcements, notifications, advertisements, promotions – YooBar < 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yoo-slider
Published
2022-03-21
Title
Yoo Slider < 2.1.0 - Arbitrary Slider Duplication/Deletion via CSRF
Slug
yoo-slider
Published
2022-03-21
Title
Yoo Slider < 2.1.0 - Contributor+ Stored Cross-Site Scripting
Slug
yoo-slider
Published
2022-04-11
Title
Yoo Slider < 2.1.0 - Arbitrary Slider Creation/Edition via CSRF
Slug
yoo-slider
Published
2022-04-11
Title
Yoo Slider < 2.1.0 - Arbitrary Template Import via CSRF
Slug
yoo-slider
Published
2024-03-29
Title
Yoo Slider < 2.2.0 - Reflected Cross-Site Scripting
Slug
yookassa
Published
2022-07-29
Title
ЮKassa для WooCommerce < 2.3.1 - Subscriber+ Arbitrary Settings Update
Slug
yookassa
Published
2022-07-28
Title
ЮKassa для WooCommerce < 2.3.1 - Arbitrary Settings Update via CSRF
Slug
yop-poll
Published
2015-07-08
Title
YOP Poll <= 5.7.3 - Reflected Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2017-03-23
Title
YOP Poll <= 5.8.0 - Stored Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2019-02-05
Title
YOP Poll <= 6.0.2 - Cross-Site Scripting (XSS)
Slug
yop-poll
Published
2020-04-24
Title
YOP Poll < 6.1.5 - Authenticated Stored XSS
Slug
yop-poll
Published
2021-06-17
Title
YOP Poll < 6.2.8 - Unauthenticated Stored Cross-Site Scripting
Slug
yop-poll
Published
2021-10-15
Title
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options Module
Slug
yop-poll
Published
2021-10-15
Title
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module
Slug
yop-poll
Published
2020-01-15
Title
YOP Poll < 6.1.2 - Reflected Cross-Site Scripting
Slug
yop-poll
Published
2022-02-14
Title
YOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting
Slug
yop-poll
Published
2022-07-11
Title
YOP Poll < 6.4.3 - IP Spoofing
Slug
yop-poll
Published
2023-11-13
Title
YOP Poll < 6.5.27 - Unauthenticated Vote Manipulation via Race Condition
Slug
yop-poll
Published
2023-10-24
Title
YOP Poll < 6.5.29 - Reusable Captcha via validateImage
Slug
yop-poll
Published
2025-10-12
Title
YOP Poll < 6.5.38 - Unauthenticated Stored Cross-Site Scripting
Slug
yop-poll
Published
2025-11-02
Title
YOP Poll < 6.5.39 - Missing Authorization
Slug
yotpo-reviews-for-woocommerce
Published
2022-08-01
Title
Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRF