Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-32567 EUVD-2026-15929

WordPress YML for Yandex Market plugin < 5.3.0 - Arbitrary File Deletion vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in icopydoc YML for Yandex Market yml-for-yandex-market allows Path Traversal.This issue affects YML for Yandex Market: from n/a through < 5.3.0.

Affected products

VendorProductAffectedFixed
icopydoc YML for Yandex Market ≤ < 5.3.0 —

References