Yudiz vulnerabilities
We track 3 vulnerabilities in Yudiz products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 28, 2026.
Latest Yudiz vulnerabilities
- 8.1 High severity
WP Contact Form 7 DB Handler: Cross-Site Request Forgery
The WP Contact Form 7 DB Handler plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Deletion via SQL Injection and PHP Object Injection in versions up to and including 3.0. This is due to a missing nonce verification in
- 7.2 High severity
Easy Email Subscription: Improper Neutralization of Input During Web Page Generation
The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthentica
- 8.8 High severity
WP Replicate Post: Improper Neutralization of Special Elements used in an SQL Command
The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the post_id parameter in versions up to, and including, 4.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query