Yonisink vulnerabilities
We track 5 vulnerabilities in Yonisink products across 5 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2025.
Latest Yonisink vulnerabilities
- 9.6 Critical severity
Custom Post Type Images: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Images custom-post-types-image allows Code Injection.This issue affects Custom Post Type Images: from n/a through <= 0.5.
- 7.1 High severity
yCyclista: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonisink yCyclista ycyclista allows Reflected XSS.This issue affects yCyclista: from n/a through <= 1.2.3.
- 8.8 High severity
Custom Post Type Lockdown: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Lockdown custom-post-type-lockdown allows Privilege Escalation.This issue affects Custom Post Type Lockdown: from n/a through <= 1.11.
- 8.8 High severity
Sinking Dropdowns: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in yonisink Sinking Dropdowns sinking-dropdowns allows Privilege Escalation.This issue affects Sinking Dropdowns: from n/a through <= 1.25.
- 7.1 High severity
yPHPlista: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in yonisink yPHPlista yphplista allows Stored XSS.This issue affects yPHPlista: from n/a through <= 1.1.1.