Vulnerabilities > Plugin > Yourchannel > 1.2.3
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-04-05 | CVE-2023-1865 | Unspecified vulnerability in Plugin Yourchannel 1.2.3 The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when resetting plugin settings via the yrc_nuke GET parameter in versions up to, and including, 1.2.3. | 6.5 |
| 2023-04-05 | CVE-2023-1866 | Unspecified vulnerability in Plugin Yourchannel 1.2.3 The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.3. | 4.3 |
| 2023-04-05 | CVE-2023-1867 | Unspecified vulnerability in Plugin Yourchannel 1.2.3 The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.3. | 4.3 |
| 2023-04-05 | CVE-2023-1868 | Unspecified vulnerability in Plugin Yourchannel 1.2.3 The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when clearing the plugin cache via the yrc_clear_cache GET parameter in versions up to, and including, 1.2.3. | 5.3 |
| 2023-04-05 | CVE-2023-1869 | Cross-site Scripting vulnerability in Plugin Yourchannel 1.2.3 The YourChannel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping. | 4.8 |
| 2023-04-05 | CVE-2023-1870 | Unspecified vulnerability in Plugin Yourchannel 1.2.3 The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.3. | 4.3 |
| 2023-04-05 | CVE-2023-1871 | Unspecified vulnerability in Plugin Yourchannel 1.2.3 The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.3. | 4.3 |