Extension WordPress
Vulnérabilités YARPP – Yet Another Related Posts Plugin
Cette page rassemble les failles publiées pour YARPP – Yet Another Related Posts Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de YARPP – Yet Another Related Posts Plugin
8 fiches
YARPP <= 5.30.10 – Missing Authorization
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check in the ~/includes/yarpp_pro_set_display_types.php file in all versions up to, and including, 5.30.10. This makes it possible…
*-5.30.10
5.30.11
26/08/2024
YARPP – Yet Another Related Posts Plugin <= 5.30.9 – Authenticated(Administrator+) Cross-Site Scripting
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 5.30.9 due to insufficient input sanitization and output escaping. This makes…
*-5.30.9
5.30.10
18/06/2024
Yet Another Related Posts Plugin (YARPP) <= 5.30.9 – Authenticated(Administrator+) Stored Cross-Site Scripting via settings
The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. This makes…
*-5.30.9
5.30.10
20/02/2024
YARPP – Yet Another Related Posts Plugin <= 5.30.3 – Authenticated (Contributor+) Stored Cross-Site Scripting
The YARPP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'className' parameter in versions up to, and including, 5.30.3 due to insufficient input sanitization and output escaping. This makes it possible for contributor-level attackers to inject…
*-5.30.3
5.30.4
17/07/2023
YARPP – Yet Another Related Posts Plugin <= 5.30.2 – Authenticated (Subscriber+) SQL Injection via Shortcode
The YARRP plugin for WordPress is vulnerable to SQL Injection via the 'limit' parameter set via a shortcode in versions up to, and including, 5.30.2 due to insufficient escaping on the user supplied parameter and lack of sufficient…
[*, 5.30.3)
5.30.3
25/04/2023
YARPP <= 5.30.4 – Authenticated (Subscriber+) Local File Inclusion
The YARPP plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.30.4 via the yarpp shortcode due to insufficient validation on the 'template' user attribute. This allows subscriber-level attackers, and above, to…
*-5.30.4
5.30.5
18/04/2023
YARPP – Yet Another Related Posts Plugin <= 5.30.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The YARPP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 5.30.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…
*-5.30.2
5.30.3
19/01/2023
YARPP – Yet Another Related Posts Plugin < 4.2.5 – Cross-Site Request Forgery
The YARPP – Yet Another Related Posts Plugin for WordPress is vulnerable a Cross-Site Request Forgery which can lead to Remote Code Execution in versions up to, and including, 4.2.4 via the yarpp_options.php file. This allows unauthenticated attackers…
[*, 4.2.5)
4.2.5
08/05/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.