All products

ymc-smart-filter

WordPress · Plugin
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
YMC Filter <= 3.12.19 - Authenticated (Author+) Stored DOM-Based Cross-Site Scripting via 'post_title' ParameterCVE-2026-109983 ymc-smart-filter WordPress Medium Fix reported
YMC Smart Filter <= 3.11.2 - Unauthenticated Private/Draft Post DisclosureCVE-2026-10823 ymc-smart-filter WordPress Medium Fix reported
YMC Filter <= 3.12.8 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2026-16559 ymc-smart-filter WordPress Medium Fix reported
YMC Filter <= 3.12.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-16558 ymc-smart-filter WordPress Medium Fix reported
YMC Filter <= 3.11.5 - Unauthenticated SQL InjectionCVE-2026-54836 ymc-smart-filter WordPress High Fix reported
Filter & Grids <= 3.5.1 - Missing AuthorizationCVE-2026-32397 ymc-smart-filter WordPress Medium Fix reported
Filter & Grids <= 3.2.0 - Unauthenticated SQL InjectionCVE-2025-10289 ymc-smart-filter WordPress Medium Fix reported
Filter & Grids <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-39665 ymc-smart-filter WordPress Medium Fix reported
Filter & Grids <= 2.8.33 - Cross-Site Request ForgeryCVE-2024-39664 ymc-smart-filter WordPress Medium Fix reported
Filter & Grids <= 2.8.32 - Unauthenticated Local File InclusionCVE-2024-6164 ymc-smart-filter WordPress Critical Fix reported