CVE-2026-120548

The YML for Yandex Market plugin for WordPress, in versions up to and including 5.10.0 , is vulnerable to Sensitive Information Exposure . Through the 'y4ym_check_action' parameter via admin-post.php , unauthenticated attackers can extract a merchant's plaintext Yandex Market API key from the pub...