Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: ysinnovations Clear all filters
TI-2026-00975 CVE-2026-1256 · GHSA-h43h-55xh-wjgc

Cross-site scripting in ysinnovations YS LeadGen – Popup Builder, Popup Maker & Form…

Priority LOW 28

The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site Scripting via multiple AJAX endpoints in all versions up to, and including, 2.1.4 due to missing capability checks on popup…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0035 Published 2026-09-19 No fix listed CWE-79