Skip to content

Vendor

yahoo updates for wordpress plugin project vulnerabilities

1 published CVE affecting yahoo updates for wordpress plugin project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of yahoo updates for wordpress plugin project alerts

Products

Latest yahoo updates for wordpress plugin project CVEs

Newest publication first

  1. CVE-2014-4603 Yahoo Updates For WordPress <= 1.0 - Cross-Site Scripting

    Published
    MediumCVSS 4.3 EPSS 1.6%

    Multiple cross-site scripting (XSS) vulnerabilities in yupdates_application.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) secret, (2) key, or (3) appid parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.