CVE-2023-1865

CVE-2023-1865 affects YourChannel for WordPress up to version 1.2.3. It is due to a missing capability check when resetting plugin settings via the yrc_nuke GET parameter, enabling unauthenticated attackers to delete YouTube channels from the plugin. Impact: unauthorized data loss (LOW/LOW in CVS...

CVE-2023-1868

CVE-2023-1868 affects the YourChannel WordPress plugin (versions