CyberSecBulletin

Ymc-22 vulnerabilities

We track 2 vulnerabilities in Ymc-22 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 1, 2024.

2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score

Latest Ymc-22 vulnerabilities

  • 7.3 High severity

    Filter & Grids: Missing Authorization

    CVE-2024-39664YMC

    Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Filter & Grids: from n/a through 2.8.33.

  • 9.8 Critical severity

    Filter & Grids: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2024-6164Filter & GridsEPSS 1.09%

    The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. This makes it possible for an unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code