Search vulnerabilities

Results 2

CVE-2026-39485

WordPress Youtube Embed Plus plugin <= 14.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in embedplus Youtube Embed Plus youtube-embed-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Embed Plus: from n/a through <= 14.2.4.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
CVE-2017-1000224

CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the plugin

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products