What’s Vulnerable › Products

VaultDweller Leyka vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your VaultDweller Leyka version is affected

Latest VaultDweller Leyka vulnerabilities

• CVE-2026-42717 — WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2026-66677 — WordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability (CVSS 7.6)
• CVE-2025-52805 — WordPress Leyka plugin <= 3.32.1 - Local File Inclusion vulnerability (CVSS 7.5)
• CVE-2025-53275 — WordPress Leyka plugin <= 3.32.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-26766 — WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-35683 — WordPress Leyka plugin <= 3.31.1 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2023-2995 — Leyka < 3.30.4 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2023-4917 — Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure (CVSS 6.5)
• CVE-2023-33325 — WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2023-39314 — WordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2023-27450 — WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)