Yuki

yuki

Vulnerabilities:

3

Last Updated:

February 27, 2026

Active Installs:

800

Published
Title
Fixed in
CVSS
Published
2024-02-27
Title
Yuki < 1.3.14 - Missing Authorization to Authenticated (Subscriber+) Theme Setting Reset
Fixed in
Fixed in 1.3.14
CVSS
4.3 (medium)
Published
2024-02-27
Title
Yuki < 1.3.15 - Cross-Site Request Forgery to Theme Setting Reset
Fixed in
Fixed in 1.3.15
CVSS
4.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.8
CVSS
6.1 (medium)