Skip to content
OpenAdvisories

Product · yonisink

yContributors

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2025-6041

    yContributors <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The yContributors plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5. This is due to missing or incorrect nonce validation on the 'yContributors' page. This makes it possible for unauthenticated attacker…

    yonisink yContributors Web / CMS