Youtube Embed

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-24471 MEDIUM POC This Month

The YouTube Embed WordPress plugin before 5.2.2 does not validate, escape or sanitise some of its shortcode attributes, leading to Stored XSS issues by 1. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Youtube Embed

NVD WPScan

CVSS 3.1

5.4

EPSS

0.6%

CVE-2015-6535 LOW PATCH Monitor

Cross-site scripting (XSS) vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.

XSS WordPress PHP Youtube Embed

NVD

CVSS 2.0

3.5

EPSS

0.5%

CVE-2021-24471

EPSS 1% CVSS 5.4

MEDIUM POC This Month

WordPress XSS Youtube Embed

NVD WPScan

CVE-2015-6535

EPSS 1% CVSS 3.5

LOW PATCH Monitor

XSS WordPress PHP +1

NVD