YMC Filter
YMC Filter has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 9 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2026 was the busiest year with 5 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (33%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF).
Every one of the 9 issues recorded for YMC Filter has a vendor fix available, so running the current release closes all known holes.
8 independent researchers contributed these findings, most of them (2) reported by R3N0. YMC Filter is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-6164Filter & Grids <= 2.8.32 - Unauthenticated Local File Inclusion
Read the full analysisVulnerability Records

YMC Filter
Author
YMC
YMC Filter is a powerful and flexible WordPress plugin that allows you to easily filter and display your posts, custom post types, and other content in responsive grid layouts. With an intuitive interface and customizable filters, you can create dynamic, engaging, and visually appealing grids without touching a single line of code. Whether you’re building a blog, portfolio, news site, or product showcase – YMC Filter helps you display content the way you want: searchable, filterable, and optimized for all devices. Key Features Select one or more post types to display in a grid. Sort posts, taxonomies, and terms (manual sorting included). Different pagination options: Numeric, Load more, Infinite scroll. Multiple templates for filters and post cards. Frontend post sorting and search bar. Responsive grids with customizable columns, spacing, and breakpoints. Featured posts support (inside or outside the grid). Popup view for post content. Sliders support (post carousel and other types). Custom WP_Query integration to build advanced queries. Masonry and justified grid layouts. Customization options: colors, typography, icons, backgrounds. Preloader icon customization. Fine-tune terms with icons, colors, backgrounds. JS API & Hooks to manage asynchronous filter operations. Export / Import settings. Multilingual support (WPML, Polylang). Constructor for combined filters (mix multiple filter types in one grid). Integration with Elementor, WPBakery, and Gutenberg. Mobile-friendly UI/UX optimization. Visual Card Builder: Create unique post layouts using a drag-and-drop interface. Seamless Page Builder Integration: Easily add and configure smart filters within your favorite editors, including Elementor, WPBakery Page Builder, and native Gutenberg blocks. Video
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C