Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:B34976B3-54C3-45B7-86A0-387EE0A4B680
HistoryApr 18, 2023 - 12:00 a.m.

YARPP - Yet Another Related Posts Plugin < 5.30.5 - Subscriber+ LFI

2023-04-1800:00:00
wpscan.com
17
yarpp plugin
lfi
authentication bypass
security issue

0.0004 Low

EPSS

Percentile

10.6%

JSON

The plugin does not validate a parameter before using it in an include statement, allowing any authenticated users, such as subscriber to perform LFI attacks

Related

cvelist 1
vulnrichment 1
nvd 1
cve 1
openvas 1
wordfence 1
cvelist
cvelist
CVE-2022-45374 WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.4 - Local File Inclusion
2024-05-17 06:28:46
vulnrichment
vulnrichment
CVE-2022-45374 WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.4 - Local File Inclusion
2024-05-17 06:28:46
nvd
nvd
CVE-2022-45374
2024-05-17 07:15:47
cve
cve
CVE-2022-45374
2024-05-17 07:15:47
openvas
openvas
WordPress YARPP Plugin < 5.30.3 Multiple Vulnerabilities
2023-04-14 00:00:00
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (Apr 17, 2023 to Apr 23, 2023)
2023-04-27 12:16:14

0.0004 Low

EPSS

Percentile

10.6%

JSON
Related for WPVDB-ID:B34976B3-54C3-45B7-86A0-387EE0A4B680
cvelist1vulnrichment1nvd1cve1openvas1wordfence1