Skip to content
Noroxi

yotuwp records

4 published records for vendor yotuwp.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
25%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 22
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2024-4258
    39Monitor

    Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Unauthenticated Local File Inclusion

    CriticalCVSS 9.8No exploitEPSS 0%

    yotuwp · video galleryJun 15, 2024

  • CVE-2022-35726
    39Monitor

    WordPress Video Gallery plugin <= 1.3.4.5 - Broken Authentication vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    yotuwp · video galleryAug 23, 2022

  • CVE-2024-4551
    35Monitor

    Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Authenticated (Contributor+) Arbitrary File Inclusion via Shortcode

    HighCVSS 8.8No exploitEPSS 0%

    yotuwp · video galleryJun 15, 2024

  • CVE-2023-25477
    19Monitor

    WordPress Video Gallery Plugin <= 1.3.12 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    yotuwp · video gallerySep 1, 2023