Icopydoc

11 CVEs across 8 Icopydoc products. Browse Icopydoc vulnerabilities, severities, and proof-of-concept exploits.

Icopydoc products with known CVEs

ProductCVEs
Maps For Wp3
Yml For Yandex Market3
Yml For Yandex Market3
XML For Google Merchant Center2
Import From Yml1
Maps For Wp1
XML For Avito1
XML For Google Merchant Center1
Icopydoc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-32567Medium6.82026-03-25Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in icopydoc YML for Yandex Market yml-for-yandex-market allows Pat…
CVE-2025-64232High7.12025-11-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icopydoc Import from YML import-from-yml allows Reflected…
CVE-2025-57952Medium5.92025-09-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This i…
CVE-2025-32179Medium6.52025-04-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icopydoc Maps for WP maps-for-wp allows Stored XSS.This i…
CVE-2024-13648Medium6.42025-02-21The Maps for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MapOnePoint' shortcode in all versions up to, and including…
CVE-2025-24646High7.12025-02-03Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icopydoc XML for Avito xml-for-avito allows Reflected XSS…
CVE-2024-13406Medium6.12025-01-22The XML for Google Merchant Center plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'feed_id' parameter in all versions up to, and…
CVE-2024-9378Medium6.12024-10-02The YML for Yandex Market plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 4…
CVE-2024-1365Medium6.12024-03-13The YML for Yandex Market plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the feed_id parameter in all versions up to, and including…
CVE-2023-30877High7.12023-08-17Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov XML for Google Merchant Center plugin <= 3.0.1 versions.
CVE-2023-30473High7.12023-08-16Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov YML for Yandex Market plugin <= 3.10.7 versions.