WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
yourplugins-wc-conditional-cart-notices
Published
2025-09-26
Title
Conditional Cart Messages for WooCommerce – YourPlugins.com <= 1.2.10 - Cross-Site Request Forgery
Slug
yousaytoo-auto-publishing-plugin
Published
2012-01-09
Title
Yousaytoo Auto Publishing <= 1.0 - Cross Site Scripting
Slug
youtube-channel
Published
2023-01-11
Title
YouTube Channel < 3.23.0 - Contributor+ Stored XSS via Shortcode
Slug
youtube-channel
Published
2023-01-04
Title
My YouTube Channel < 3.23.0 - Admin+ Stored XSS
Slug
youtube-channel-gallery
Published
2023-01-18
Title
Youtube Channel Gallery <= 2.4 - Contributor+ Stored XSS via Shortcode
Slug
youtube-embed
Published
2015-08-26
Title
YouTube Embed < 3.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
youtube-embed
Published
2021-07-19
Title
YouTube Embed < 5.2.2 - Contributor+ Stored XSS
Slug
youtube-embed
Published
2025-04-09
Title
YouTube Embed < 5.4 - Admin+ Stored XSS
Slug
youtube-embed
Published
2025-12-22
Title
YouTube Embed <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
youtube-embed-plus
Published
2017-07-25
Title
YouTube Embed <= 11.8.1 - Cross-Site Request Forgery (CSRF)
Slug
youtube-embed-plus
Published
2026-03-06
Title
Youtube Embed Plus < 14.2.5 - Missing Authorization
Slug
youtube-feed-pro
Published
2026-01-16
Title
Feeds for YouTube Pro < 2.6.1 - Unauthenticated Arbitrary File Read via Path Traversal
Slug
youtube-feeder
Published
2021-07-30
Title
Youtube Feeder <= 2.0.1 - CSRF to Stored XSS
Slug
youtube-playlist-player
Published
2023-05-23
Title
YouTube Playlist Player < 4.6.5 - Cross-Site Request Forgery (CSRF)
Slug
youtube-playlist-player
Published
2023-10-18
Title
YouTube Playlist Player < 4.6.8 - Contributor+ Stored XSS
Slug
youtube-shortcode
Published
2023-01-19
Title
Youtube Shortcode <= 1.8.5 - Contributor+ Stored XSS
Slug
youtube-showcase
Published
2023-08-16
Title
Video Gallery & Management < 3.3.6 - Settings Update via CSRF
Slug
youtube-showcase
Published
2024-05-20
Title
YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress < 3.4.0 - Missing Authorization to Arbitrary Post/Page Creation
Slug
youtube-showcase
Published
2025-08-25
Title
YouTube Showcase < 3.5.2 - Unauthenticated PHP Object Injection
Slug
youtube-showcase
Published
2025-09-23
Title
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
youtube-showcase
Published
2026-04-15
Title
Video Gallery – YouTube Gallery & Responsive Video Playlist < 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
youtube-showcase
Published
2026-06-30
Title
Video Gallery < 4.0.4 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter
Slug
youtube-simple-gallery
Published
2025-06-05
Title
YouTube Simple Gallery <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
youtube-simplegallery
Published
2025-03-28
Title
YouTube SimpleGallery <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
youtube-speedload
Published
2023-11-09
Title
Youtube SpeedLoad <= 0.6.3 - Cross-Site Request Forgery