← WordPress Vulnerabilities
WordPress security by component

YourChannel

YourChannel is a WordPress component with 9 published CVE records in this archive. The latest tracked vulnerability was published Apr 05, 2023; the highest CVE/CNA score is 6.5.

Plugin slug: yourchannel

CVE-2023-1871: YourChannel: Cross-site request forgery

YourChannel is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedApr 05, 2023
Safe version guidanceSee mitigation notes
Safe version
Apr 05, 2023 CVE-2023-1871
YourChannel: Cross-site request forgery
YourChannel is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE5.4
NVD4.3
Apr 05, 2023 CVE-2023-1870
YourChannel: Cross-site request forgery
YourChannel is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD4.3
Apr 05, 2023 CVE-2023-1869
YourChannel: Cross-site scripting
YourChannel is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.5
NVD4.8
Apr 05, 2023 CVE-2023-1868
YourChannel: A security weakness
YourChannel is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVD5.3
Apr 05, 2023 CVE-2023-1867
YourChannel: Cross-site request forgery
YourChannel is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE5.4
NVD4.3
Apr 05, 2023 CVE-2023-1866
YourChannel: Cross-site request forgery
YourChannel is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE5.4
NVD4.3
Apr 05, 2023 CVE-2023-1865
YourChannel: A security weakness
YourChannel is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVD6.5
Feb 06, 2023 CVE-2023-0282
YourChannel: Cross-site scripting
YourChannel is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.4
NVD5.4
Feb 06, 2023 CVE-2022-4833
YourChannel: Everything you want in a YouTube plugin: Cross-site scripting
YourChannel: Everything you want in a YouTube plugin is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.4
NVD5.4