Skip to contentUnknown Yo vulnerabilities
- saas.group juicer, unknown embed, curate & aggregate social media feeds into your website using juicer +1 moreJuicer < 1.11 - Contributor+ Stored XSSCVE-2023-01725.4 Medium
- eaglevisionit evision responsive column layout shortcodeseVision Responsive Column Layout Shortcodes <= 2.3 - Contributor+ Stored XSSCVE-2023-00645.4 Medium
- kainelabs youzifyYouzify < 1.2.2 - Contributor+ Stored XSSCVE-2023-00595.4 Medium
- unknown youtube channel gallery, youtube channel gallery project channel gallery +1 moreYoutube Channel Gallery <= 2.4 - Contributor+ Stored XSS via ShortcodeCVE-2022-47835.4 Medium
- happyforms, happyforms form builder to get in touch with visitors, grow your email list and collect payments — happyforms +1 moreHappyforms < 1.22.0 - Contributor+ Stored XSSCVE-2023-00965.4 Medium
- plugin yourchannel, unknown yourchannel: everything you want in a youtube plugin. +1 moreYourChannel < 1.2.2 - Subscriber+ Stored XSSCVE-2023-02825.4 Medium
- plugin yourchannel, unknown yourchannel: everything you want in a youtube plugin. +1 moreYourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via ShortcodeCVE-2022-48335.4 Medium
- aleksandar urošević my youtube channel, my youtube channel project youtube channel +1 moreYouTube Channel < 3.23.0 - Contributor+ Stored XSS via ShortcodeCVE-2022-47565.4 Medium
- getyourguide ticketing project ticketing, unknown getyourguide ticketing +1 moreGetYourGuide Ticketing < 1.0.4 - Admin+ Stored XSSCVE-2022-36094.8 Medium
- helloprint, helloprint plug your woocommerce into the largest catalog of customized print products from helloprint +1 moreHelloprint < 1.4.7 - Reflected Cross-Site ScriptingCVE-2022-39086.1 Medium
- codexpert search logger, unknown search logger – know what your visitors search +1 moreSearch Logger <= 0.9 - Admin+ SQLiCVE-2022-31317.2 High
- yotpo reviews for woocommerce project reviews for woocommerce, unknown yotpo reviews for woocommerce (unofficial) +1 moreYotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRFCVE-2022-25556.5 Medium
- slickremix feed them social, unknown feed them social – for twitter feed, youtube and more +1 moreFeed Them Social < 3.0.1 - Reflected Cross-Site ScriptingCVE-2022-25326.1 Medium
- slickremix feed them social, unknown feed them social – for twitter feed, youtube and more +1 moreFeed Them Social < 3.0.1 - Reflected Cross-Site ScriptingCVE-2022-23836.1 Medium
- kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 moreYouzify < 1.2.0 - Unauthenticated SQLiCVE-2022-19509.8 Critical
- unknown yop poll, yop poll +1 moreYOP Poll < 6.4.3 - IP SpoofingCVE-2022-16005.3 Medium
- wp-eventmanager wp event manager, unknown wp event manager – easily build your calendar of events! +1 moreWP Event Manager < 3.1.28 - Reflected Cross-Site ScriptingCVE-2022-14746.1 Medium
- macbookandrew wp youtube live, wp youtube live project youtube live +1 moreWP YouTube Live < 1.8.3 - Admin+ Stored Cross Site ScriptingCVE-2022-13344.8 Medium
- unknown yop poll, yop poll, yop-poll +2 moreYOP Poll < 6.3.5 - Author+ Stored Cross-Site ScriptingCVE-2022-02055.4 Medium
- rednao smart forms, edgarrojas smart forms – when you need more than just a contact form +1 moreSmart Forms < 2.6.71 - Subscriber+ Form Data DownloadCVE-2022-01636.5 Medium
- wp-eventmanager wp event manager, unknown wp event manager – easily build your calendar of events! +1 moreWP Event Manager < 3.1.23 - Admin+ Stored Cross-Site ScriptingCVE-2021-248104.8 Medium
- wprssaggregator wp rss aggregator, unknown wp rss aggregator – news feeds, autoblogging, youtube video feeds and more +1 moreWP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)CVE-2022-01896.1 Medium
- unknown yoast seo, yoast seo +1 moreYoast SEO 16.7-17.2 - Unauthenticated Full Path DisclosureCVE-2021-251185.3 Medium
- translationexchange translation exchange, unknown translation exchange – translate your wordpress site in minutes! +1 moreTranslation Exchange <= 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-250575.4 Medium
- wprssaggregator wp rss aggregator, unknown wp rss aggregator – news feeds, autoblogging, youtube video feeds and more +1 moreWP RSS Aggregator < 4.19.3 - Subscriber+ Stored Cross-Site ScriptingCVE-2021-249885.4 Medium
- wprssaggregator wp rss aggregator, unknown wp rss aggregator – news feeds, autoblogging, youtube video feeds and more +1 moreWP RSS Aggregator < 4.19.2 - Admin+ Stored Cross-Site ScriptingCVE-2021-247684.8 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options ModuleCVE-2021-248345.4 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview ModuleCVE-2021-248335.4 Medium
- unknown yop poll, yop poll, yop-poll +2 moreYOP Poll < 6.1.2 - Reflected Cross-Site ScriptingCVE-2021-248856.1 Medium
- origincode video gallery, unknown video gallery - vimeo and youtube gallery +1 moreVideo Gallery - Vimeo and YouTube Gallery < 1.1.5 - Admin+ Stored Cross-Site ScriptingCVE-2021-245154.8 Medium
- bplugins video player for youtube, video player for youtube project player for youtube +1 moreYT Player < 1.4 - Contributor+ Stored Cross-Site ScriptingCVE-2021-244145.4 Medium
- unknown simple social media share buttons – social sharing for everyone, wpbrigade simple social buttons +1 moreSimple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site ScriptingCVE-2021-246564.8 Medium
- cminds tooltip glossary, unknown cm tooltip glossary – better seo and uex for your wp site +1 moreCM Tooltip Glossary < 3.9.21 - Contributor+ Stored Cross-Site ScriptingCVE-2021-246785.4 Medium
- unknown 有赏 you shang, you-shang project you-shang +1 moreYou Shang <= 1.0.1 - Authenticated Stored Cross-Site ScriptingCVE-2021-245975.4 Medium
- itservicejung youforms-free-for-copecart, unknown youforms for wordpress – creating forms for copecart +1 moreyouForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site ScriptingCVE-2021-245964.8 Medium
- geekwebsolution embed youtube videoEmbed Youtube Video <= 1.0 - Authenticated SQL InjectionCVE-2021-243957.2 High
- simplygallery simply gallery blocks with lightbox, gallerycreator gallery blocks with lightbox. image gallery, (html5 video , youtube, vimeo) video gallery and lightbox for native gallery +1 moreGallery Blocks with Lightbox < 2.2.1- Authenticated Stored Cross-Site ScriptingCVE-2021-246675.4 Medium
- kn fix your title project fix your title, unknown kn fix your title +1 moreKN Fix Your Title <= 1.0.1 - Authenticated Stored XSSCVE-2021-245475.4 Medium
- unknown simple social media share buttons – social sharing for everyone, wpbrigade simple social media share buttons +1 moreSimple Social Media Share Buttons < 3.2.3 - Contributor+ Stored XSSCVE-2021-244865.4 Medium
- embeds for youtube plugin support youtube embed, youtube embed project embed +1 moreYouTube Embed < 5.2.2 - Contributor+ Stored XSSCVE-2021-244715.4 Medium
- unknown youtube embed, playlist and popup by wpdevart, wpdevart youtube embed\, playlist and popup +1 moreYouTube Embed, Playlist and Popup < 2.3.9 - Contributor+ Stored XSSCVE-2021-244645.4 Medium
- kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 moreYouzify < 1.0.7 - Stored Cross-Site Scripting via BiographyCVE-2021-244435.4 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.2.8 - Stored Cross-Site ScriptingCVE-2021-244546.1 Medium
- futtta wp youtube lyte, wp youtube lyte project youtube lyte +1 moreWP YouTube Lyte < 1.7.16 - Authenticated Stored XSSCVE-2021-244194.8 Medium
- getastra wp hardening, unknown wp hardening – fix your wordpress security +1 moreWP Hardening < 1.2.2 - Reflected XSS via historyvalueCVE-2021-243736.1 Medium
- getastra wp hardening, unknown wp hardening – fix your wordpress security +1 moreWP Hardening < 1.2.2 - Reflected XSS via URICVE-2021-243726.1 Medium
- unknown yoast seo, yoast seo +1 moreYoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-241535.4 Medium
- minimal work srl pixelyoursiteCross-site scripting vulnerability in PixelYourSite plugin prior to version 5.3.0 for WordPress...CVE-2018-05785.4 Medium