CVE-2025-14545: Unknown Yml For Yandex Market

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The YML for Yandex Market WordPress plugin before 5.0.26 is vulnerable to Remote Code Execution via the feed generation process.

Affected products

• Unknown Yml For Yandex Market: before 5.0.26 (fixed in 5.0.26)

Published 2026-04-10. Last modified 2026-10-07.