yonisink

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

yonisink records in CISA KEV

No yonisink vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2025-36060 CVE-2025-58255 · GHSA-29vr-h58w-hvj7

WordPress Custom Post Type Images Plugin <= 0.5 - Cross Site Request Forgery (CSRF) Vulnerability

MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Images custom-post-types-image allows Code Injection.This issue affects Custom Post Type Images: from n/a through <= 0.5.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0017 Published 2025-09-22 No fix listed CWE-352

TI-2025-17297 CVE-2025-23530 · GHSA-57gf-488m-657j

WordPress Custom Post Type Lockdown plugin <= 1.11 - CSRF to Privilege Escalation vulnerability

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Lockdown custom-post-type-lockdown allows Privilege Escalation.This issue affects Custom Post Type Lockdown: from n/a through <= 1.11.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00293 Published 2025-01-16 No fix listed CWE-352

TI-2024-37174 CVE-2024-56204 · GHSA-xvg7-rj7x-j6gm

WordPress Sinking Dropdowns plugin <= 1.25 - CSRF to Privilege Escalation vulnerability

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in yonisink Sinking Dropdowns sinking-dropdowns allows Privilege Escalation.This issue affects Sinking Dropdowns: from n/a through <= 1.25.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00291 Published 2024-12-31 No fix listed CWE-352

TI-2025-17467 CVE-2025-23700 · GHSA-jhfj-4x6v-p4q6

WordPress yCyclista plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonisink yCyclista ycyclista allows Reflected XSS.This issue affects yCyclista: from n/a through <= 1.2.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00396 Published 2025-01-22 No fix listed CWE-79

TI-2024-35915 CVE-2024-53717 · GHSA-89v6-qjfr-p5jm

WordPress yPHPlista plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in yonisink yPHPlista yphplista allows Stored XSS.This issue affects yPHPlista: from n/a through <= 1.1.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00173 Published 2024-12-02 No fix listed CWE-352

TI-2024-34709 CVE-2024-51805 · GHSA-v57f-wfrq-gh7p

WordPress yPHPlista plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonisink yPHPlista yphplista allows Stored XSS.This issue affects yPHPlista: from n/a through <= 1.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00413 Published 2024-11-19 No fix listed CWE-79

TI-2025-05458 CVE-2025-6041 · GHSA-53cv-fw7c-99rw

yContributors <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

LOW 26

The yContributors plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00137 Published 2025-07-04 No fix listed CWE-352

Open these records in search →

Critical	1
High	4
Medium	2
Low	0
No CVSS	0