All 5 CVE vulnerabilities found in YML for Yandex Market, with AI-generated Chinese analysis, references, and POCs.
Vendor: Maxim Glazunov
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-14545 | YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed Generation | 9.8 | - | 2026-04-10 |
| CVE-2026-32567 | WordPress YML for Yandex Market plugin < 5.3.0 - Arbitrary File Deletion vulnerability CWE-22 | 7.5 | - | 2026-03-25 |
| CVE-2024-9378 | YML for Yandex Market <= 4.7.2 - Reflected Cross-Site Scripting CWE-79 | 6.1 | Medium | 2024-10-02 |
| CVE-2024-1365 | YML for Yandex Market <= 4.2.3 - Reflected Cross-Site Scripting CWE-79 | 6.1 | Medium | 2024-03-13 |
| CVE-2023-30473 | WordPress YML for Yandex Market Plugin <= 3.10.7 is vulnerable to Cross Site Scripting (XSS) CWE-79 | 7.1 | High | 2023-08-16 |
All 5 known CVE vulnerabilities affecting YML for Yandex Market with full Chinese analysis, references, and POCs where available.