Yumpu Yumpu E-Paper Publishing
2 CVEs affecting Yumpu Yumpu E-Paper Publishing. Latest disclosed: 2025-01-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12621 | Medium | 6.4 | 2025-01-09 | The Yumpu E-Paper publishing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'YUMPU' shortcode in all versions up to, and in… |
CVE-2024-3277 | Medium | 5.0 | 2024-05-30 | The Yumpu ePaper publishing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handler funct… |