Yourchannel (Plugin) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-04-05. Vendor: Plugin.
CVEs of Yourchannel
- CVE-2023-1867 - CVSS 5.4 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect…
- CVE-2023-1870 - CVSS 4.3 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect…
- CVE-2023-1866 - CVSS 5.4 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect…
- CVE-2023-1869 - CVSS 5.5 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.5 due to…
- CVE-2023-1865 - CVSS 6.5 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when resetting plugin settings via the…
- CVE-2023-1868 - CVSS 6.5 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when clearing the plugin cache via the…
- CVE-2023-1871 - CVSS 5.4 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect…
- CVE-2023-0282 - CVSS 5.4 (medium), 2023-02-06: The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with a role as low as Subscriber to…
- CVE-2022-4833 - CVSS 5.4 (medium), 2023-02-06: The YourChannel: Everything you want in a YouTube plugin WordPress plugin before 1.2.3 does not validate and escape some of its shortcode attributes before…
