PT-2026-31880 · WordPress · Yml For Yandex Market

Alex Tselevich · CVE-2025-14545 · Published 2026-04-10 · Updated 2026-04-10

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions YML for Yandex Market WordPress plugin versions prior to 5.0.26

Description The YML for Yandex Market WordPress plugin is susceptible to Remote Code Execution through its feed generation process.

Recommendations Update to version 5.0.26 or later.

Exploit

Fix

Related Identifiers

CVE-2025-14545

Affected Products

Yml For Yandex Market

References · 3

• 🔥 https://wpscan.com/vulnerability/9bb1a4ca-976c-461d-82de-8a3b04a56fbc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14545 · Security Note
• https://twitter.com/CVEnew/status/2042561742866387117 · Twitter Post