CVE-2023-0282: Plugin Yourchannel

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The YourChannel WordPress plugin before 1.2.2 does not sanitize and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.

Affected products

• Plugin Yourchannel: before 1.2.2 (fixed in 1.2.2)

Published 2023-02-06. Last modified 2026-06-17.