Yikesinc

11 CVEs across 2 Yikesinc products. Browse Yikesinc vulnerabilities, severities, and proof-of-concept exploits.

Yikesinc products with known CVEs

ProductCVEs
Easy Forms For Mailchimp8
Custom Product Tabs For Woocommerce3
Yikesinc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-11465High7.22025-01-07The Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserializat…
CVE-2023-4925Medium4.82024-01-15The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2023-23900Medium5.82023-08-10Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in YIKES, Inc. Easy Forms for Mailchimp plugin <= 6.8.8 versions.
CVE-2023-1323Medium4.82023-06-12The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters, which could allow high privilege users suc…
CVE-2023-2518Medium6.12023-05-30The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape a parameter before outputting it back in the page when the debug option…
CVE-2023-1324Medium6.12023-04-24The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before outputting them back in the response, leading to…
CVE-2023-1325Medium5.42023-04-17The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/…
CVE-2022-43463Medium4.82022-11-18Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on WordPress.
CVE-2022-28666Medium5.32022-07-21Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin <= 1.7.7 at WordPress leading to &yikes-the-content-toggle option…
CVE-2021-24985Medium6.12022-01-24The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in…
CVE-2019-15318Critical9.82019-08-22The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field.