VYPR
Vendor

Yarpp

Products
2
CVEs
4
Across products
4
Status
Private

Products

2

Recent CVEs

4
  • CVE-2024-43919MedNov 1, 2024
    risk 0.38cvss 5.3epss 0.44

    Access Control vulnerability in YARPP YARPP allows . This issue affects YARPP: from n/a through 5.30.10.

  • CVE-2023-2433MedJul 18, 2023
    risk 0.35cvss 6.4epss 0.00

    The YARPP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'className' parameter in versions up to, and including, 5.30.3 due to insufficient input sanitization and output escaping. This makes it possible for contributor-level attackers to inject arbitrary…

  • CVE-2023-6495MedJun 19, 2024
    risk 0.29cvss 4.4epss 0.00

    The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

  • CVE-2024-0602MedFeb 29, 2024
    risk 0.22cvss 4.4epss 0.01

    The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…