Skip to content
OpenAdvisories

Vendor

yonisink

7 known vulnerabilities.

Products

yPHPlista 2 Custom Post Type Lockdown 1 Custom Post Type Images 1 yCyclista 1 yContributors 1 Sinking Dropdowns 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2025-23700

    WordPress yCyclista plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonisink yCyclista ycyclista allows Reflected XSS.This issue affects yCyclista: from n/a through <= 1.2.3.

    yonisink yCyclista
  • High 8.8
    CVE-2025-23530

    WordPress Custom Post Type Lockdown plugin <= 1.11 - CSRF to Privilege Escalation vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Lockdown custom-post-type-lockdown allows Privilege Escalation.This issue affects Custom Post Type Lockdown: from n/a through <= 1.11.

    yonisink Custom Post Type Lockdown
  • High 8.8
    CVE-2024-56204

    WordPress Sinking Dropdowns plugin <= 1.25 - CSRF to Privilege Escalation vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in yonisink Sinking Dropdowns sinking-dropdowns allows Privilege Escalation.This issue affects Sinking Dropdowns: from n/a through <= 1.25.

    yonisink Sinking Dropdowns
  • High 7.1
    CVE-2024-53717

    WordPress yPHPlista plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in yonisink yPHPlista yphplista allows Stored XSS.This issue affects yPHPlista: from n/a through <= 1.1.1.

    yonisink yPHPlista