CVE-2023-4917

CVE-2023-4917 (Leyka WordPress plugin) affects Leyka versions

CVE-2023-2995

The CVE reports a stored XSS vulnerability in the Leyka WordPress plugin, affecting versions prior to 3.30.4. Root cause: the plugin does not adequately sanitize and escape certain settings, enabling high-privilege users (e.g., administrators) to inject scripts even when unfiltered_html is disabl...

CVE-2023-39314

CVE-2023-39314 affects the Leyka WordPress plugin (Teplitsa of social technologies) v1.x, specifically versions

CVE-2023-27450

CVE-2023-27450 is an unauthenticated stored XSS in the WordPress Leyka plugin (

CVE-2023-33325

CVE-2023-33325 (Leyka plugin for WordPress) : Unauth. Reflected Cross-Site Scripting in Leyka versions = 3.30.2 (Patch indicates fix in 3.30.2). Other entries corroborate vulnerability details and patch status. If using