Approved changes feed: RSS · Atom
cpe:2.3:a:te-st:leyka:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Te St (214fc3ce-0595-5300-bd51-335eaebefe42) |
|---|---|
| Product | Leyka (473bb4b1-d99e-57f8-ab1e-85cdf5ea7cca) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/leyka |
purl2cpe | 2026-06-01 10:16:33.192236 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4917 |
vulnerable | 2026-06-08 06:16:14.904778 |
Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure
MEDIUM (5.3)
The Leyka plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.30.7 via the 'leyka_ajax_get_env_and_options' function. This can allow authenticated attackers with subscriber-level permissions or above to extract sensitive data including Sberbank API key and password, PayPal Client Secret, and more keys and passwords.
Published: 2023-09-13T02:54:12.803Z
Updated: 2026-04-08T17:27:54.001Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39314 |
vulnerable | 2026-06-08 06:09:37.021912 |
WordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.30.2 versions.
Published: 2023-08-10T12:46:48.926Z
Updated: 2026-04-28T16:08:34.725Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33325 |
vulnerable | 2026-06-08 06:06:22.326546 |
WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.30.1 versions.
Published: 2023-08-30T12:34:49.770Z
Updated: 2026-04-28T16:08:26.157Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2995 |
vulnerable | 2026-06-08 06:02:43.779748 |
Leyka < 3.30.4 - Admin+ Stored XSS
The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2023-09-19T19:37:08.838Z
Updated: 2025-04-23T16:16:20.973Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27450 |
vulnerable | 2026-06-08 05:57:41.602645 |
WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.29.2 versions.
Published: 2023-06-21T12:49:08.873Z
Updated: 2026-04-28T16:08:14.172Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.