Severity High Medium Low Informational Vulnerability Categories 200 Abuse Of Functionality Arbitrary File Creation Authentication Bypass Bruteforce Possible Buffer Overflow CSRF Code Execution Configuration Crlf Injection Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities Ldap Injection Malware Missing Update Privilege Escalation SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity WordPress Plugin YITH WooCommerce Gift Cards Security Bypass (1.3.7) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Mailchimp Security Bypass (2.1.3) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Multi-step Checkout Security Bypass (1.7.4) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Multi Vendor Security Bypass (3.4.0) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Order Tracking Security Bypass (1.2.10) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce PDF Invoice and Shipping List Security Bypass (1.2.12) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Points and Rewards Security Bypass (1.3.4) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Product Add-Ons Security Bypass (1.5.21) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Product Bundles Security Bypass (1.1.15) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Questions and Answers Security Bypass (1.1.9) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Quick View Security Bypass (1.3.13) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Recover Abandoned Cart Security Bypass (1.3.2) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Request A Quote Security Bypass (1.4.7) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Social Login Security Bypass (1.3.4) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Stripe Security Bypass (2.0.1) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Subscription Security Bypass (1.3.4) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Waiting List Security Bypass (1.3.9) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Wishlist Security Bypass (2.2.13) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin YITH WooCommerce Wishlist SQL Injection (2.1.2) CWE-89 CWE-89 High WordPress Plugin YITH WooCommerce Wishlist Unspecified Vulnerability (2.0.6) High WordPress Plugin YITH WooCommerce Zoom Magnifier Cross-Site Scripting (1.1.8) CWE-79 CWE-79 High WordPress Plugin YITH WooCommerce Zoom Magnifier Cross-Site Scripting (1.2.6) CWE-79 CWE-79 High WordPress Plugin YITH WooCommerce Zoom Magnifier Security Bypass (1.3.11) CVE-2019-16251 CWE-264 CWE-264 High WordPress Plugin Yoast SEO Cross-Site Request Forgery (3.3.1) CWE-352 CWE-352 High WordPress Plugin Yoast SEO Cross-Site Scripting (2.0.1) CWE-79 CWE-79 High WordPress Plugin Yoast SEO Cross-Site Scripting (2.1.1) CVE-2012-6692 CWE-79 CWE-79 High WordPress Plugin Yoast SEO Cross-Site Scripting (3.2.5) CWE-79 CWE-79 High WordPress Plugin Yoast SEO Cross-Site Scripting (3.4.0) CWE-79 CWE-79 High WordPress Plugin Yoast SEO Cross-Site Scripting (5.7.1) CVE-2017-16842 CWE-79 CWE-79 High WordPress Plugin Yoast SEO Cross-Site Scripting (11.5) CVE-2019-13478 CWE-79 CWE-79 High WordPress Plugin Yoast SEO Information Disclosure (3.2.4) CWE-200 CWE-200 High WordPress Plugin Yoast SEO Possible Remote Code Execution (9.1.0) CVE-2018-19370 CWE-94 CWE-94 High WordPress Plugin Yoast SEO Security Bypass (1.4.6) CWE-264 CWE-264 High WordPress Plugin Yoast SEO SQL Injection (1.7.3.3) CVE-2015-2292 CWE-89 CWE-89 High WordPress Plugin Yoast SEO Unspecified Vulnerability (5.9.2) High WordPress Plugin yolink Search for WordPress 'bulkcrawl.php' SQL Injection (1.1.4) CWE-89 CWE-89 High WordPress Plugin yolink Search for WordPress Cross-Site Scripting (2.5) CWE-79 CWE-79 High WordPress Plugin YOP Poll Cross-Site Scripting (5.7.3) CWE-79 CWE-79 High WordPress Plugin YOP Poll Cross-Site Scripting (5.8.0) CVE-2017-2127 CWE-79 CWE-79 High WordPress Plugin YOP Poll Cross-Site Scripting (6.0.2) CVE-2019-9914 CWE-79 CWE-79 High WordPress Plugin YOP Poll Cross-Site Scripting (6.1.1) CWE-79 CWE-79 High WordPress Plugin YOP Poll Cross-Site Scripting (6.1.4) CWE-79 CWE-79 High WordPress Plugin YOP Poll Multiple Cross-Site Scripting Vulnerabilities (4.9.1) CWE-79 CWE-79 High WordPress Plugin YOP Poll Unspecified Vulnerability (5.7.7) High WordPress Plugin Your Text Manager Cross-Site Scripting (0.3.0) CVE-2014-4604 CWE-79 CWE-79 High WordPress Plugin YouSayToo auto-publishing 'submit' Parameter Cross-Site Scripting (1.0.1) CVE-2012-0901 CWE-79 CWE-79 High WordPress Plugin YouTube Advanced by Embed Plus Cross-Site Scripting (5.3) CWE-79 CWE-79 High WordPress Plugin YouTube Cross-Site Request Forgery (11.8.1) CWE-352 CWE-352 High WordPress Plugin YouTube Embed Cross-Site Scripting (3.3.2) CVE-2015-6535 CWE-79 CWE-79 High WordPress Plugin YouTube Embed Cross-Site Scripting (5.0.1) CWE-79 CWE-79 High WordPress Plugin YouTube Gallery-Best YouTube Video Gallery Cross-Site Scripting (3.2.1) CWE-79 CWE-79 High WordPress Plugin YT-Audio:Audio Hosting From YouTube in WordPress 'v' Parameter Cross-Site Scripting (1.7) CWE-79 CWE-79 High WordPress Plugin yURL ReTwitt Cross-Site Request Forgery (1.4) CVE-2014-9341 CWE-352 CWE-352 High WordPress Plugin Z-URL Preview Cross-Site Scripting (1.6.2) CVE-2017-18012 CWE-79 CWE-79 High WordPress Plugin Z-Vote 'zvote' Parameter SQL Injection (1.1) CWE-89 CWE-89 High WordPress Plugin ZdStatistics Cross-Site Scripting (2.0.1) CVE-2014-4605 CWE-79 CWE-79 High WordPress Plugin Zedity:The Easiest Way To Create Posts & Pages Cross-Site Scripting (2.5.0) CWE-79 CWE-79 High WordPress Plugin Zedity:The Easiest Way To Create Posts & Pages Unspecified Vulnerability (5.0.2) High WordPress Plugin Zedna Contact form Arbitrary File Upload (1.0) CWE-434 CWE-434 High WordPress Plugin Zedna Contact form Directory Traversal (1.1) CWE-22 CWE-22 High WordPress Plugin Zedna eBook download Directory Traversal (1.1) CWE-22 CWE-22 High WordPress Plugin ZeenShare Cross-Site Scripting (1.0.1) CVE-2014-4606 CWE-79 CWE-79 High WordPress Plugin zeList Directory Cross-Site Scripting (0.5.11.07) CWE-79 CWE-79 High WordPress Plugin Zendesk Chat Cross-Site Request Forgery (1.4.5) CWE-352 CWE-352 High WordPress Plugin Zendesk Chat Cross-Site Scripting (1.2.5) CVE-2013-1808 CWE-79 CWE-79 High WordPress Plugin Zendesk Chat Unspecified Vulnerability (1.3.9) High WordPress Plugin Zendesk Help Center by BestWebSoft Cross-Site Scripting (1.0.4) CVE-2017-2171 CWE-79 CWE-79 High WordPress Plugin Zero BS WordPress CRM Cross-Site Request Forgery (2.99.9) CWE-352 CWE-352 High WordPress Plugin Zero Spam SQL Injection (2.1.2) CWE-89 CWE-89 High WordPress Plugin Zibbra Cross-Site Scripting (1.7.0) CWE-79 CWE-79 High WordPress Plugin Zielke Specialized Catalog Arbitrary File Upload (3.0.7) CWE-434 CWE-434 High WordPress Plugin Zingiri Web Shop 'abspath' Parameter Remote File Include (2.4.6) CWE-94 CWE-94 High WordPress Plugin Zingiri Web Shop 'ajax_save_name.php' Remote Code Execution (2.2.3) CWE-95 CWE-95 High WordPress Plugin Zingiri Web Shop 'uploadfilexd.php' Arbitrary File Upload (2.4.3) CWE-434 CWE-434 High WordPress Plugin Zingiri Web Shop 'wpabspath' Parameter Remote File Include (2.2.0) CWE-94 CWE-94 High 1...888990 89 / 90
