Yarpp vulnerabilities
We track 1 vulnerability in Yarpp products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Yarpp vulnerabilities
- 8.8 High severity
YARPP: Improper Neutralization of Special Elements used in an SQL Command
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.