Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
leyka
WordPress
· Plugin
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Leyka <= 3.32.3 - Authenticated (Administrator+) SQL Injection
CVE-2026-42717
leyka
WordPress
Medium
No fix reported
2026-10-09
Leyka <= 3.32.3 - Missing Authorization
CVE-2026-66677
leyka
WordPress
Medium
No fix reported
2026-08-24
Leyka <= 3.31.9 - Unauthenticated Local File Inclusion
CVE-2025-52805
leyka
WordPress
High
No fix reported
2025-07-08
Leyka <= 3.31.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-53275
leyka
WordPress
Medium
No fix reported
2025-07-02
Leyka <= 3.31.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-26766
leyka
WordPress
Medium
Fix reported
2025-02-19
Leyka <= 3.31.6 - Missing Authorization
CVE-2024-49252
leyka
WordPress
Medium
Fix reported
2024-10-18
Leyka <= 3.31.1 - Missing Authorization
CVE-2024-35683
leyka
WordPress
Medium
Fix reported
2024-06-12
Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure
CVE-2023-4917
leyka
WordPress
Medium
Fix reported
2024-01-22
Leyka <= 3.30.2 - Reflected Cross-Site Scripting
CVE-2023-39314
leyka
WordPress
Medium
Fix reported
2024-01-22
Leyka <= 3.30.1 - Reflected Cross-Site Scripting
CVE-2023-33325
leyka
WordPress
Medium
Fix reported
2024-01-22
Leyka <= 3.29.2 - Cross-Site Request Forgery
CVE-2023-27442
leyka
WordPress
Medium
Fix reported
2024-01-22
Leyka <= 3.30.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2023-2995
leyka
WordPress
Medium
Fix reported
2024-01-22
Leyka <= 3.29.2 - Unauthenticated Stored Cross-Site Scripting
CVE-2023-27450
leyka
WordPress
High
Fix reported
2024-01-22
Leyka <= 3.30.2 - Privilege Escalation via Admin Password Reset
CVE-2023-33327
leyka
WordPress
Critical
Fix reported
2024-01-22