WordPress Plugin Vulnerabilities

Related YouTube Videos <= 1.9.8 - CSRF & XSS

Description

The Related YouTube Videos WordPress plugin was affected by a CSRF & XSS security vulnerability.

Affects Plugins

Plugin icon
related-youtube-videos
Fixed in 1.9.9

References

CVE
CVE-2019-5980
URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2094934%40related-youtube-videos&old=2047681%40related-youtube-videos
URL
https://jvn.jp/en/jp/JVN31406910/index.html

Miscellaneous

Original Researcher
Shoichiro Ishikawa of Cryptography Laboratory
Verified
No
WPVDB ID
d661fd02-329c-4806-b7da-bda852560409

Timeline

Publicly Published
2019-05-25 (about 6 years ago)
Added
2019-06-12 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2019-07-08
Title
Rencontre – Dating Site <= 3.1.2 - SQLi & XSS
Published
2015-01-12
Title
Pods < 2.5 - Authenticated XSS & CSRF
Published
2015-08-26
Title
Private Only <= 3.5.1 - CSRF & XSS
Published
2020-01-10
Title
EasyBook < 1.2.2 - Multiple Vulnerabilities
Published
2021-07-02
Title
Workreap < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities