YMC

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

YMC records in CISA KEV

No YMC vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-39639 CVE-2026-54836 · GHSA-9mfm-rqgg-86f7

WordPress Filter & Grids plugin <= 3.11.5 - SQL Injection vulnerability

MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQL Injection.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01343 Published 2026-06-25 No fix listed CWE-89

TI-2024-26588 CVE-2024-39664 · GHSA-hw58-87p6-r2h3

WordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerability

LOW 38

Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Filter & Grids: from n/a through 2.8.33.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00416 Published 2024-11-01 No fix listed CWE-862

TI-2026-24925 CVE-2026-32397 · GHSA-44rx-344j-ccv5

WordPress Filter & Grids plugin <= 3.5.1 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter & Grids: from n/a through <= 3.5.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00202 Published 2026-03-13 No fix listed CWE-862

TI-2024-26589 CVE-2024-39665 · GHSA-mg9x-hp2r-28xj

WordPress Filter & Grids plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in YMC Filter & Grids allows Stored XSS.This issue affects Filter & Grids: from n/a through 2.9.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00289 Published 2024-08-01 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0