Yonisink

7 CVEs across 6 Yonisink products. Browse Yonisink vulnerabilities, severities, and proof-of-concept exploits.

Yonisink products with known CVEs

ProductCVEs
Yphplista2
Custom Post Type Images1
Custom Post Type Lockdown1
Sinking Dropdowns1
Ycontributors1
Ycyclista1
Yonisink CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-58255Critical9.62025-09-22Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Images custom-post-types-image allows Code Injection.This issue affects Custom Pos…
CVE-2025-6041Medium6.12025-07-04The yContributors plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5. This is due to missing or incorre…
CVE-2025-23700High7.12025-01-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonisink yCyclista ycyclista allows Reflected XSS.This is…
CVE-2025-23530High8.82025-01-16Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Lockdown custom-post-type-lockdown allows Privilege Escalation.This issue affects…
CVE-2024-56204High8.82024-12-31Cross-Site Request Forgery (CSRF) vulnerability in yonisink Sinking Dropdowns sinking-dropdowns allows Privilege Escalation.This issue affects Sinking Dropdown…
CVE-2024-53717High7.12024-12-02Cross-Site Request Forgery (CSRF) vulnerability in yonisink yPHPlista yphplista allows Stored XSS.This issue affects yPHPlista: from n/a through <= 1.1.1.
CVE-2024-51805Medium6.52024-11-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonisink yPHPlista yphplista allows Stored XSS.This issue…