Pluginbuilders

11 CVEs across 2 Pluginbuilders products. Browse Pluginbuilders vulnerabilities, severities, and proof-of-concept exploits.

Pluginbuilders products with known CVEs

ProductCVEs
Yourchannel: Everything You Want In A Youtube Plugin.7
Waiting: One-Click Countdowns4
Pluginbuilders CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-4954Medium5.52023-10-20The Waiting: One-click countdowns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown name in versions up to, and including, 0…
CVE-2023-4000Medium6.32023-08-31The Waiting: One-click countdowns plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.2. This is due to miss…
CVE-2023-3999Medium6.32023-08-31The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on its AJAX calls in versions up…
CVE-2023-2757High7.42023-05-18The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on 'saveLang' functions in versi…
CVE-2023-1871Medium5.42023-04-05The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect n…
CVE-2023-1870Medium4.32023-04-05The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect n…
CVE-2023-1869Medium5.52023-04-05The YourChannel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.5 due to insufficie…
CVE-2023-1868Medium6.52023-04-05The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when clearing the plugin cache via the yrc_cl…
CVE-2023-1867Medium5.42023-04-05The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect n…
CVE-2023-1866Medium5.42023-04-05The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect n…
CVE-2023-1865Medium6.52023-04-05The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when resetting plugin settings via the yrc_n…