WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
video-conferencing-with-zoom-api
Published
2026-01-28
Title
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation
Slug
video-conferencing-with-zoom-api
Published
2026-02-15
Title
Video Conferencing with Zoom < 4.6.7 - Missing Authorization
Slug
video-conferencing-with-zoom-api
Published
2026-06-15
Title
Video Conferencing with Zoom < 4.6.8 - Missing Authorization to Unauthenticated Zoom SDK Credential Exposure via 'get_auth' AJAX Action
Slug
video-conferencing-with-zoom-api
Published
2026-08-18
Title
Video Conferencing with Zoom <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
video-contest
Published
2023-05-25
Title
Video Contest WordPress <= 3.2 - Admin+ Stored XSS
Slug
video-contest
Published
2023-05-25
Title
Video Contest WordPress <= 3.2 - Cross-Site Request Forgery
Slug
video-embed-box
Published
2021-05-19
Title
Video Embed <= 1.0 - Authenticated (subscriber+) SQL Injection
Slug
video-embed-optimizer
Published
2025-01-07
Title
Video Embed Optimizer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
video-embed-privacy
Published
2024-10-10
Title
Embed videos and respect privacy < 1.3 - Reflected Cross-Site Scripting
Slug
video-embed-thumbnail-generator
Published
2014-08-01
Title
VideoJS - Cross-Site Scripting (XSS)
Slug
video-embed-thumbnail-generator
Published
2012-03-21
Title
Video Embed Thumbnail Generator < 2.0 - FPD & RCE
Slug
video-embed-thumbnail-generator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
video-embed-thumbnail-generator
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
video-embed-thumbnail-generator
Published
2025-07-16
Title
Videopack < 4.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
video-embedder
Published
2025-03-28
Title
Video Embedder < 1.8 - Stored XSS via CSRF
Slug
video-embeds
Published
2025-06-05
Title
Video Embeds <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
video-expander
Published
2025-08-14
Title
Video Expander <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
video-gallery-block
Published
2025-07-04
Title
Video Gallery Block < 1.1.1 - Contributor+ Stored XSS
Slug
video-grid
Published
2023-08-16
Title
Video Grid < 1.22 - Reflected XSS
Slug
video-lead-form
Published
2014-08-01
Title
Video Lead Form - "errMsg" Cross-Site Scripting
Slug
video-list-manager
Published
2023-04-17
Title
Video List Manager <= 1.7 - Admin+ SQL Injection
Slug
video-list-manager
Published
2025-06-19
Title
Video List Manager <= 1.7 - Authenticated (Contributor+) SQL Injection
Slug
video-list-manager
Published
2025-06-19
Title
Video List Manager <= 1.7 - Missing Authorization
Slug
video-list-manager
Published
2025-06-26
Title
Video List Manager <= 1.7 - Reflected Cross-Site Scripting
Slug
video-list-manager
Published
2025-07-01
Title
Video List Manager <= 1.7 - Unauthenticated SQL Injection