PatchSiren

YMC CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL YMC CVE published 2026-06-25

CVE-2026-54836

A SQL Injection vulnerability exists in YMC Filter, a WordPress plugin, from version n/a through 3.11.5. This issue, known as CVE-2026-54836, was publicly disclosed on June 25, 2026, and last modified on October 25, 2026. The vulnerability has a CVSS score of 9.3 and is considered Critical. Defenders should assess exposure and prioritize verification and potential remediation. The CVE record and NVD entry [truncated]