CVE-2025-26766

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VaultDweller Leyka leyka allows Stored XSS.This issue affects Leyka: from n/a through = 3.31.8...

CVE-2025-26766 WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VaultDweller Leyka leyka allows Stored XSS.This issue affects Leyka: from n/a through = 3.31.8...

CVE-2025-26766 WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VaultDweller Leyka leyka allows Stored XSS.This issue affects Leyka: from n/a through = 3.31.8...

CVE-2025-26766

CVE-2025-26766 (Leyka WordPress plugin) is a stored XSS in Leyka where the vulnerability arises from improper neutralization of input during web page generation. Affected: Leyka versions up to and including 3.31.8. Impact is described as cross-site scripting with stored payloads; the CVSS vector ...

WordPress plugin Leyka 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis Patchstack Alliance in WordPress Plugin Leyka versions = 3.31.8...

CVE-2024-49252

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.This issue affects Leyka: from n/a through = 3.31.6...

CVE-2024-49252 WordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.This issue affects Leyka: from n/a through = 3.31.6...

CVE-2024-49252 WordPress leyka plugin <= 3.31.6 - Broken Access Control vulnerability

: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.6...

CVE-2024-49252

CVE-2024-49252 corresponds to a Broken Access Control / Full Path Disclosure vulnerability in the WordPress Leyka plugin (versions

WordPress plugin Leyka 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-33390 · Leyka · Leyka

Name of the Vulnerable Software and Affected Versions: Leyka versions prior to 3.31.6 Description: The issue is related to the exposure of sensitive system information to an unauthorized control sphere. This is a problem where sensitive information is accessible to unauthorized parties, potential...

WordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Leyka versions = 3.31.6...

WordPress Leyka Plugin <=3.31.6 is vulnerable to Full Path Disclosure (FPD)

Software Leyka Type Plugin Vulnerable versions =3.31.6 Fixed in 3.31.7 OWASP Top 10 A5: Security Misconfiguration Classification Full Path Disclosure FPD CVE CVE-2024-49252 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 27d1979f75bc Credits Trương Hữu Phúc truonghuuphuc...

Leyka < 3.31.2 - Missing Authorization

Description The Leyka plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sendCardCheck function in versions up to, and including, 3.31.1. This makes it possible for unauthenticated attackers to perform a card check...

CVE-2024-35683

Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1...

CVE-2024-35683 WordPress Leyka plugin <= 3.31.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1...

CVE-2024-35683

CVE-2024-35683 describes a Missing Authorization vulnerability in Leyka (Leyka plugin for WordPress). Affected versions: Leyka up to 3.31.1 (inclusive). CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N with base score 5.3 (Medium). Impact per metrics indicates only partial integrity impact (I...

CVE-2024-35683 WordPress Leyka plugin <= 3.31.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1...

WordPress plugin Leyka security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...