TI-2026-70356 CVE-2026-42717 · GHSA-c865-xg92-5wjr
SQL injection in WordPress Leyka plugin lets admins run queries
Priority LOW 33
Administrator SQL Injection in Leyka <= 3.32.3 versions.
Vulnerabilities
6 records
TI-2026-47345 CVE-2026-66677 · GHSA-96rh-xvcc-h6fr
WordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability
Priority LOW 33
Subscriber Broken Authentication in Leyka <= 3.32.3 versions.
TI-2025-32855 CVE-2025-52805 · GHSA-cj4h-9gv7-8mvv
WordPress Leyka plugin <= 3.32.1 - Local File Inclusion vulnerability
Priority LOW 35
Path Traversal: '.../...//' vulnerability in VaultDweller Leyka leyka allows PHP Local File Inclusion.This issue affects Leyka: from n/a through <= 3.32.1.
TI-2025-33242 CVE-2025-53275 · GHSA-39rw-6p2v-g5r9
WordPress Leyka plugin <= 3.32.1 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka leyka allows DOM-Based XSS.This issue affects Leyka: from n/a through <= 3.32.1.
TI-2025-19682 CVE-2025-26766 · GHSA-2f7m-mw9v-6jvp
WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka leyka allows Stored XSS.This issue affects Leyka: from n/a through <= 3.31.8.
TI-2024-32845 CVE-2024-49252 · GHSA-q7q9-7mhx-gjww
WordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability
Priority LOW 30
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.This issue affects Leyka: from n/a through <= 3.31.6.