YARPP records
7 published records for vendor yarpp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 14.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
52Plan | CVE-2024-43919Proof of concept | WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerabilityyarpp · yet another related posts plugin · CWE-862 | Critical9.8 | — | 44.9% | Nov 1, 2024 |
35Monitor | CVE-2023-0579No exploit | YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLiyarpp · yet another related posts plugin · CWE-89 | High8.8 | — | 0.9% | Aug 16, 2023 |
26Monitor | CVE-2022-45374No exploit | WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.4 - Local File Inclusionyarpp · yet another related posts plugin · CWE-22 | Medium6.5 | — | 0.8% | May 17, 2024 |
21Monitor | CVE-2022-4471No exploit | YARPP - Yet Another Related Posts Plugin < 5.30.3 - Contributor+ Stored XSSyarpp · yet another related posts plugin · CWE-79 | Medium5.4 | — | 0.7% | Feb 13, 2023 |
21Monitor | CVE-2023-2433No exploit | YARPP – Yet Another Related Posts Plugin <= 5.30.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingyarpp · yet another related posts plugin · CWE-79 | Medium5.4 | — | 0.5% | Jul 18, 2023 |
19Monitor | CVE-2023-6495No exploit | YARPP – Yet Another Related Posts Plugin <= 5.30.9 - Authenticated(Administrator+) Cross-Site Scriptingyarpp · yet another related posts plugin · CWE-79 | Medium4.8 | — | 0.3% | Jun 19, 2024 |
16Monitor | CVE-2024-0602No exploit | Yet Another Related Posts Plugin (YARPP) <= 5.30.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via settingsyarpp · yet another related posts plugin · CWE-79 | Medium4.0 | — | 0.5% | Feb 28, 2024 |
- CVE-2024-4391952Plan
WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability
CriticalCVSS 9.8Proof of conceptEPSS 45%yarpp · yet another related posts pluginNov 1, 2024
- CVE-2023-057935Monitor
YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi
HighCVSS 8.8No exploitEPSS 1%yarpp · yet another related posts pluginAug 16, 2023
- CVE-2022-4537426Monitor
WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.4 - Local File Inclusion
MediumCVSS 6.5No exploitEPSS 1%yarpp · yet another related posts pluginMay 17, 2024
- CVE-2022-447121Monitor
YARPP - Yet Another Related Posts Plugin < 5.30.3 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 1%yarpp · yet another related posts pluginFeb 13, 2023
- CVE-2023-243321Monitor
YARPP – Yet Another Related Posts Plugin <= 5.30.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 1%yarpp · yet another related posts pluginJul 18, 2023
- CVE-2023-649519Monitor
YARPP – Yet Another Related Posts Plugin <= 5.30.9 - Authenticated(Administrator+) Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 0%yarpp · yet another related posts pluginJun 19, 2024
- CVE-2024-060216Monitor
Yet Another Related Posts Plugin (YARPP) <= 5.30.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
MediumCVSS 4.0No exploitEPSS 1%yarpp · yet another related posts pluginFeb 28, 2024