Skip to content
OpenAdvisories

Vendor

VaultDweller

7 known vulnerabilities.

Products

Leyka 7
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-53275

    WordPress Leyka plugin <= 3.32.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka leyka allows DOM-Based XSS.This issue affects Leyka: from n/a through <= 3.32.1.

    VaultDweller Leyka
  • Medium 6.5
    CVE-2025-26766

    WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka leyka allows Stored XSS.This issue affects Leyka: from n/a through <= 3.31.8.

    VaultDweller Leyka
  • Medium 5.3
    CVE-2024-49252

    WordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in VaultDweller Leyka leyka.This issue affects Leyka: from n/a through <= 3.31.6.

    VaultDweller Leyka
  • Medium 5.3
    CVE-2023-4917

    Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure

    The Leyka plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.30.7 via the 'leyka_ajax_get_env_and_options' function. This can allow authenticated attackers with subscriber-level permissions or above to ext…

    VaultDweller Leyka Web / CMS