Skip to content
OpenAdvisories

Product · WP Moose

Yuki

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-1943

    Yuki <= 1.3.14 - Cross-Site Request Forgery to Theme Setting Reset

    The Yuki theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 1.3.14. This is due to missing or incorrect nonce validation on the reset_customizer_options() function. This makes it possible for unauthenticated a…

    WP Moose Yuki Web / CMS
  • Medium 4.3
    CVE-2024-1388

    Yuki <= 1.3.13 - Missing Authorization to Authenticated (Subscriber+) Theme Setting Reset

    The Yuki theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_customizer_options() function in all versions up to, and including, 1.3.13. This makes it possible for authenticated attackers, with…

    WP Moose Yuki Web / CMS