Vulnerability in Ymc Filter

CVE-2026-16558

The YMC Filter WordPress plugin before 3.12.8 does not sanitize and escape a layout builder setting before outputting it on a public endpoint, and does not verify object ownership when the setting is saved, allowing users with the Contribu…

Affected products

  • Unknown Ymc Filter — versions 3.6.0

References