<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: yooslider</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-27847: Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider &lt;= 2.0.0 on WordPress allows attackers</title><link>https://patchthecve.com/cve/CVE-2022-27847.html</link><guid>https://patchthecve.com/cve/CVE-2022-27847.html</guid><pubDate>Wed, 17 Jun 2026 04:37:37 +0000</pubDate><description>MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider &lt;= 2.0.0 on WordPress allows attackers to import templates.</description></item><item><title>CVE-2022-27846: Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider &lt;= 2.0.0 on WordPress allows attackers</title><link>https://patchthecve.com/cve/CVE-2022-27846.html</link><guid>https://patchthecve.com/cve/CVE-2022-27846.html</guid><pubDate>Wed, 17 Jun 2026 04:37:37 +0000</pubDate><description>MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider &lt;= 2.0.0 on WordPress allows attackers to create or modify slider.</description></item><item><title>CVE-2022-25609: Stored Cross-Site Scripting (XSS) in Yoo Slider – Image Slider &amp; Video Slider (WordPress plugin) allows attack</title><link>https://patchthecve.com/cve/CVE-2022-25609.html</link><guid>https://patchthecve.com/cve/CVE-2022-25609.html</guid><pubDate>Wed, 17 Jun 2026 04:33:45 +0000</pubDate><description>MEDIUM 5.4: Stored Cross-Site Scripting (XSS) in Yoo Slider – Image Slider &amp; Video Slider (WordPress plugin) allows attackers with contributor or higher user role to inject the malicious code.</description></item><item><title>CVE-2022-25608: Cross-Site Request Forgery (CSRF) in Yoo Slider – Image Slider &amp; Video Slider (WordPress plugin) allows attack</title><link>https://patchthecve.com/cve/CVE-2022-25608.html</link><guid>https://patchthecve.com/cve/CVE-2022-25608.html</guid><pubDate>Wed, 17 Jun 2026 04:33:45 +0000</pubDate><description>MEDIUM 5.4: Cross-Site Request Forgery (CSRF) in Yoo Slider – Image Slider &amp; Video Slider (WordPress plugin) allows attackers to trick authenticated users into unwanted slider duplicate or delete action.</description></item></channel></rss>