Plugin icon

Feeds for YouTube (YouTube video, channel, and gallery plugin)

feeds-for-youtube

Vulnerabilities:

5

Last Updated:

June 10, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-04-27
Title
Feeds for YouTube < 2.6.4 - Subscriber+ License Data Deletion
Fixed in
Fixed in 2.6.4
CVSS
5.4 (medium)
Published
2025-11-06
Title
Feeds for YouTube < 2.6.1 - Missing Authorization
Fixed in
Fixed in 2.6.1
CVSS
5.3 (medium)
Published
2024-07-10
Title
Feeds for YouTube (YouTube video, channel, and gallery plugin) < 2.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.2
CVSS
6.4 (medium)
Published
2023-09-13
Title
Feeds for YouTube < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 2.1.2
CVSS
6.4 (medium)
Published
2021-07-20
Title
Multiple Plugins from Smash Balloon - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.4.2
CVSS
4.7 (medium)