yonisink

Products

Product	CVEs	Exploited	Latest
yPHPlista	2	–	Dec 2, 2024
Custom Post Type Images	1	–	Sep 22, 2025
Custom Post Type Lockdown	1	–	Jan 16, 2025
Sinking Dropdowns	1	–	Dec 31, 2024
yContributors	1	–	Jul 4, 2025
yCyclista	1	–	Jan 22, 2025

CVE-2025-58255 Critical 9.6 WordPress Custom Post Type Images Plugin <= 0.5 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
CVE-2025-6041 Medium 6.1 yContributors <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.1%
CVE-2025-23700 High 7.1 WordPress yCyclista plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2025-23530 High 8.8 WordPress Custom Post Type Lockdown plugin <= 1.11 - CSRF to Privilege Escalation vulnerability 0.3%
CVE-2024-56204 High 8.8 WordPress Sinking Dropdowns plugin <= 1.25 - CSRF to Privilege Escalation vulnerability 0.3%
CVE-2024-53717 High 7.1 WordPress yPHPlista plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2024-51805 Medium 6.5 WordPress yPHPlista plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability 0.4%