CVE-2026-120548 | icopydoc YML for Yandex Market Plugin up to 5.10.0 on WordPress yml-for-yandex-market.log y4ym_check_action information disclosure (EUVD-2026-119032)

November 7, 2026 Yanac

A vulnerability identified as problematic has been detected in icopydoc YML for Yandex Market Plugin up to 5.10.0 on WordPress. This affects an unknown part of the file wp-content/uploads/y4ym/yml-for-yandex-market.log. This manipulation of the argument y4ym_check_action causes information disclosure.

This vulnerability is handled as CVE-2026-120548. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More