plugin

Yahoo Updates For Wordpress Vulnerabilities

1 known security issue reported for the Yahoo Updates For Wordpress WordPress plugin. Most recent disclosed Jul 4, 2014.

1 high

Running Yahoo Updates For Wordpress on your site? Check whether your installed version is affected.

Scan your site free

Yahoo Updates For WordPress <= 1.0 - Cross-Site Scripting

high

Multiple cross-site scripting (XSS) vulnerabilities in yupdates_application.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) secret, (2) key, or (3) appid parameter.

CVSS:
7.1
Affected:
up to 1.0
Fix:
No patched version reported
Disclosed:
Jul 4, 2014

CVE-2014-4603 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database