73 matches found
WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin YARPP versions = 5.30.10...
WordPress YARPP Plugin <= 5.30.10 is vulnerable to Broken Access Control
Software YARPP Type Plugin Vulnerable versions = 5.30.10 Fixed in 5.30.11 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43919 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b08b40ebe1e3 Credits Rafie Muhammad Patchstack Required...
CVE-2023-6495
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2023-6495
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2023-6495 YARPP – Yet Another Related Posts Plugin <= 5.30.9 - Authenticated(Administrator+) Cross-Site Scripting
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2023-6495 YARPP – Yet Another Related Posts Plugin <= 5.30.9 - Authenticated(Administrator+) Cross-Site Scripting
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2023-6495
CVE-2023-6495 concerns the YARPP – Yet Another Related Posts Plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) via admin settings in all versions up to and including 5.30.9, caused by insufficient input sanitization and output escaping. It affects sites using multi-si...
CVE-2022-45374
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in YARPP allows PHP Local File Inclusion.This issue affects YARPP: from n/a through 5.30.4...
CVE-2022-45374
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in YARPP allows PHP Local File Inclusion.This issue affects YARPP: from n/a through 5.30.4...
CVE-2022-45374 WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.4 - Local File Inclusion
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in YARPP allows PHP Local File Inclusion.This issue affects YARPP: from n/a through 5.30.4...
CVE-2022-45374 WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.4 - Local File Inclusion
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in YARPP allows PHP Local File Inclusion.This issue affects YARPP: from n/a through 5.30.4...
CVE-2024-0602
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
Cross site scripting
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress YARPP Plugin <= 5.30.9 is vulnerable to Cross Site Scripting (XSS)
Software YARPP Type Plugin Vulnerable versions = 5.30.9 Fixed in 5.30.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0602 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 260adfe121cd Credits Akbar Kustirama Required...
CVE-2024-0602 Yet Another Related Posts Plugin (YARPP) <= 5.30.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-0602 Yet Another Related Posts Plugin (YARPP) <= 5.30.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-0602
The CVE-2024-0602 entry concerns the YARPP – Yet Another Related Posts Plugin for WordPress. Affected: YARPP versions up to and including 5.30.9. Root cause: insufficient input sanitization and output escaping in admin settings, enabling Stored Cross-Site Scripting. Impact: authenticated attacker...
WordPress YARPP Plugin < 5.30.3 SQLi Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:yarpp:yetanotherrelatedpostsplugin"; ifdescription...
CVE-2023-0579
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks...
CVE-2023-0579
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks...