Advisories · Technology

VaultDweller Leyka.

Every CVE that names VaultDweller Leyka among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42717 CVE record

CVSS 7.6 High

WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability
- VaultDweller Leyka
- SQL injection
Not analysed yet 10 Oct 2026
CVE-2026-66677 CVE record

CVSS 7.6 High

WordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability
- VaultDweller Leyka
- Authentication bypass
Not analysed yet 20 Aug 2026
CVE-2025-52805 CVE record

CVSS 7.5 High

WordPress Leyka plugin <= 3.32.1 - Local File Inclusion vulnerability
- VaultDweller Leyka
- Path traversal
Not analysed yet 4 Jul 2025
CVE-2025-53275 CVE record

CVSS 6.5 Medium

WordPress Leyka plugin <= 3.32.1 - Cross Site Scripting (XSS) vulnerability
- VaultDweller Leyka
- Cross-site scripting (XSS)
Not analysed yet 27 Jun 2025
CVE-2025-26766 CVE record

CVSS 6.5 Medium

WordPress Leyka plugin <= 3.31.8 - Cross Site Scripting (XSS) vulnerability
- VaultDweller Leyka
- Cross-site scripting (XSS)
Not analysed yet 16 Feb 2025
CVE-2024-49252 CVE record

CVSS 5.3 Medium

WordPress leyka plugin <=3.31.6 - Broken Access Control vulnerability
- VaultDweller Leyka
- Information disclosure
Not analysed yet 16 Oct 2024
CVE-2023-4917 CVE record

CVSS 5.3 Medium

Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure
- vaultdweller Leyka
- Information disclosure
Not analysed yet 13 Sept 2023