yotuwp records
4 published records for vendor yotuwp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')2
- CWE-287 Improper Authentication1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-4258No exploit | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Unauthenticated Local File Inclusionyotuwp · video gallery · CWE-98 | Critical9.8 | — | 0.7% | Jun 15, 2024 |
39Monitor | CVE-2022-35726No exploit | WordPress Video Gallery plugin <= 1.3.4.5 - Broken Authentication vulnerabilityyotuwp · video gallery · CWE-287 | Critical9.8 | — | 0.7% | Aug 23, 2022 |
35Monitor | CVE-2024-4551No exploit | Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Authenticated (Contributor+) Arbitrary File Inclusion via Shortcodeyotuwp · video gallery · CWE-98 | High8.8 | — | 0.6% | Jun 15, 2024 |
19Monitor | CVE-2023-25477No exploit | WordPress Video Gallery Plugin <= 1.3.12 is vulnerable to Cross Site Scripting (XSS)yotuwp · video gallery · CWE-79 | Medium4.8 | — | 0.3% | Sep 1, 2023 |
- CVE-2024-425839Monitor
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Unauthenticated Local File Inclusion
CriticalCVSS 9.8No exploitEPSS 0%yotuwp · video galleryJun 15, 2024
- CVE-2022-3572639Monitor
WordPress Video Gallery plugin <= 1.3.4.5 - Broken Authentication vulnerability
CriticalCVSS 9.8No exploitEPSS 0%yotuwp · video galleryAug 23, 2022
- CVE-2024-455135Monitor
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Authenticated (Contributor+) Arbitrary File Inclusion via Shortcode
HighCVSS 8.8No exploitEPSS 0%yotuwp · video galleryJun 15, 2024
- CVE-2023-2547719Monitor
WordPress Video Gallery Plugin <= 1.3.12 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%yotuwp · video gallerySep 1, 2023