Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
PluginYourchannel

9 matches found

CVE
CVE•added 2023/02/06 7:59 p.m.•69 views

CVE-2022-4833

Summary: CVE-2022-4833 affects the YourChannel WordPress plugin (pre-1.2.3). The vulnerability stems from not validating/escaping shortcode attributes before output, enabling a stored XSS via shortcodes by users with as little as Contributor privileges, potentially impacting admins and other high...

5.4CVSS5.3AI score0.00261EPSS
CVE
CVE•added 2023/04/05 1:22 p.m.•65 views

CVE-2023-1865

CVE-2023-1865 affects YourChannel for WordPress up to version 1.2.3. It is due to a missing capability check when resetting plugin settings via the yrc_nuke GET parameter, enabling unauthenticated attackers to delete YouTube channels from the plugin. Impact: unauthorized data loss (LOW/LOW in CVS...

6.5CVSS6.5AI score0.00616EPSS
CVE
CVE•added 2023/04/05 1:24 p.m.•64 views

CVE-2023-1869

CVE-2023-1869 affects the YourChannel WordPress plugin. It is a Stored Cross-Site Scripting vulnerability in admin settings for versions up to 1.2.5, exploitable by authenticated users with administrative-level permissions (and higher) on multisite installations or where unfiltered_html is disabl...

5.5CVSS6.2AI score0.00303EPSS
CVE
CVE•added 2023/04/05 1:23 p.m.•61 views

CVE-2023-1867

CVE-2023-1867 affects the YourChannel WordPress plugin (versions

5.4CVSS6.6AI score0.00093EPSS
CVE
CVE•added 2023/02/06 7:59 p.m.•56 views

CVE-2023-0282

The CVE-2023-0282 entry concerns the YourChannel WordPress plugin prior to version 1.2.2, where not sanitizing/escaping certain parameters enables Cross-Site Scripting by users with Subscriber privileges. The vulnerability affects the plugin before 1.2.2 and can be mitigated by upgrading to versi...

5.4CVSS5.2AI score0.00261EPSS
CVE
CVE•added 2023/04/05 1:23 p.m.•55 views

CVE-2023-1868

CVE-2023-1868 affects the YourChannel WordPress plugin (versions

6.5CVSS6.1AI score0.00547EPSS
CVE
CVE•added 2023/04/05 1:24 p.m.•53 views

CVE-2023-1870

The CVE refers to CVE-2023-1870 affecting YourChannel for WordPress (

4.3CVSS6.6AI score0.00093EPSS
CVE
CVE•added 2023/04/05 1:23 p.m.•49 views

CVE-2023-1866

CVE-2023-1866 concerns the YourChannel WordPress plugin (

5.4CVSS6.6AI score0.00092EPSS
CVE
CVE•added 2023/04/05 1:25 p.m.•49 views

CVE-2023-1871

CVE-2023-1871 refers to the YourChannel WordPress plugin (

5.4CVSS6.6AI score0.00093EPSS