YMC vulnerabilities

🔔 Create alert RSS

Published CVEs affecting YMC products: 2 record(s), with severity, exploitation and fixes.

Filter & Grids 1 YMC Filter 1

Exploited only (KEV) →

CVE-2026-54836 Critical · 9.3 Public exploit CWE-89 Jun 25, 2026

YMC Filter - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQL Injection. This issue affects YMC Filter: from n/a through 3.11.5.

CVE-2026-32397 Medium · 5.3 CWE-862 Mar 13, 2026

WordPress Filter & Grids plugin <= 3.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter & Grids: from n/a through <= 3.5.1.