WordPress YARPP Plugin < 5.30.3 is vulnerable to SQL Injection

Software YARPP Type Plugin Vulnerable versions 5.30.3 Fixed in 5.30.3 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0579 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 014062b014de Credits Erwan LR WPScan Required privilege Subscriber Published 3...

WordPress YARPP Plugin <= 5.30.4 is vulnerable to Local File Inclusion

Software YARPP Type Plugin Vulnerable versions = 5.30.4 Fixed in 5.30.5 OWASP Top 10 A3: Sensitive Data Exposure Classification Local File Inclusion CVE CVE-2022-45374 Patch priority Low CVSS severity Low 7.7 Developer Claim ownership PSID 0e220bba19af Credits Rafie Muhammad Patchstack Required...

WordPress YARPP Plugin <= 5.30.2 is vulnerable to Cross Site Scripting (XSS)

Software YARPP Type Plugin Vulnerable versions = 5.30.2 Fixed in 5.30.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2022-4471 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 60c430d55f43 Credits István Márton Required...