Medium · 6.5 CVE-2025-14545 EUVD-2025-209399

YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed Generation

Published Apr 10, 2026 · Updated Apr 10, 2026 · Assigned by WPScan

Description

The YML for Yandex Market WordPress plugin before 5.0.26 is vulnerable to Remote Code Execution via the feed generation process.

Vendor	Product	Affected	Fixed
—	YML for Yandex Market	< 5.0.26	5.0.26