Skip to content
OpenAdvisories

Vendor

shenyanzhi

2 known vulnerabilities.

Products

USS Upyun 1 MemorialDay 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-9629

    USS Upyun <= 1.5.0 - Cross-Site Request Forgery

    The USS Upyun plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing or incorrect nonce validation on the uss_setting_page function when processing the uss_set form type. This makes…

    shenyanzhi USS Upyun Web / CMS
  • Medium 6.1
    CVE-2024-13523

    MemorialDay <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The MemorialDay plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update se…

    shenyanzhi MemorialDay Web / CMS