icopydoc

Products

Product	CVEs	Exploited	Latest
YML for Yandex Market	4	–	Nov 7, 2026
Maps for WP	3	–	Sep 22, 2025
Import from YML	1	–	Nov 6, 2025
XML for Avito	1	–	Feb 3, 2025
XML for Google Merchant Center	1	–	Jan 22, 2025

CVE-2026-120548 Medium 5.3 YML for Yandex Market <= 5.10.0 - Unauthenticated Sensitive Information Exposure through Log File via 'y4ym_check_action' Parameter via admin-post.php –
CVE-2026-32567 Medium 6.8 WordPress YML for Yandex Market plugin < 5.3.0 - Arbitrary File Deletion vulnerability 0.3%
CVE-2025-64232 High 7.1 WordPress Import from YML plugin <= 3.1.17 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-57952 Medium 5.9 WordPress Maps for WP Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability 0.3%
CVE-2025-32179 Medium 6.5 WordPress Maps for WP Plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2024-13648 Medium 6.4 Maps for WP <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
CVE-2025-24646 High 7.1 WordPress XML for Avito Plugin <= 2.5.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-13406 Medium 6.1 XML for Google Merchant Center <= 3.0.11 - Reflected Cross-Site Scripting 0.3%
CVE-2024-9378 Medium 6.1 YML for Yandex Market <= 4.7.2 - Reflected Cross-Site Scripting 0.4%
CVE-2024-1365 Medium 6.1 YML for Yandex Market <= 4.2.3 - Reflected Cross-Site Scripting 0.5%