CVE-2025-14545
CVE-2025-14545
Medium · published April 10, 2026
What it is
The YML for Yandex Market WordPress plugin before 5.0.26 is vulnerable to Remote Code Execution via the feed generation process.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00266 · 17.5th percentile
- Published
- 2026-04-10T11:16Z
References (1)
EPSS history
Timeline