Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Leyka — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Leyka, with AI-generated Chinese analysis, references, and POCs.

Vendor: Teplitsa of social technologies

CVE IDTitleCVSSSeverityPublished
CVE-2025-52805 WordPress Leyka plugin <= 3.32.1 - Local File Inclusion vulnerability CWE-35 7.5 High2025-07-04
CVE-2025-53275 WordPress Leyka plugin <= 3.32.1 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-06-27
CVE-2025-26766 WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-02-16
CVE-2024-49252 WordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability CWE-497 5.3 Medium2024-10-16
CVE-2024-35683 WordPress Leyka plugin <= 3.31.1 - Broken Access Control vulnerability CWE-862 5.3 Medium2024-06-11
CVE-2023-33327 WordPress Leyka plugin <= 3.30.2 - Privilege Escalation vulnerability CWE-269 8.8 High2024-05-14
CVE-2023-27442 WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium2023-11-22
CVE-2023-2995 Leyka < 3.30.4 - Admin+ Stored XSS 4.8 -2023-09-19
CVE-2023-4917 Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure CWE-200 5.3 Medium2023-09-13
CVE-2023-33325 WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-08-30
CVE-2023-39314 WordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-08-10
CVE-2023-27450 WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-06-21

All 12 known CVE vulnerabilities affecting Leyka with full Chinese analysis, references, and POCs where available.