Known Vulnerabilities for products from Yikesinc
Listed below are 10 of the newest known vulnerabilities associated with the vendor "Yikesinc".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2024-11465 json | The Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and... | Not Provided | 2025-01-07 | 2026-04-08 |
| CVE-2023-23900 json | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in YIKES, Inc. Easy Forms for Mailchimp plugin <= 6.8.8 versions. | 6.1 - MEDIUM | 2023-08-10 | 2023-08-15 |
| CVE-2023-2518 json | The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape a parameter before outputting it back... | 6.1 - MEDIUM | 2023-05-30 | 2023-11-07 |
| CVE-2023-1325 json | The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes befo... | 5.4 - MEDIUM | 2023-04-17 | 2023-11-07 |
| CVE-2023-1324 json | The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before outputting the... | 6.1 - MEDIUM | 2023-04-24 | 2023-11-07 |
| CVE-2023-1323 json | The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters, which co... | 4.8 - MEDIUM | 2023-06-12 | 2023-11-07 |
| CVE-2022-43463 json | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on Word... | 4.8 - MEDIUM | 2022-11-18 | 2022-11-21 |
| CVE-2022-28666 json | Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin <= 1.7.7 at WordPress leading to... | 5.3 - MEDIUM | 2022-07-21 | 2023-08-02 |
| CVE-2021-24985 json | The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type paramet... | 6.1 - MEDIUM | 2022-01-24 | 2022-01-27 |
| CVE-2019-15318 json | The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field. | 9.8 - CRITICAL | 2019-08-22 | 2020-08-24 |
Known software with vulnerabilities from Yikesinc
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Yikesinc | Easy Forms For Mailchimp | 1.0.0 |