CVE-2025-0955

CVE-2025-0955 affects the VidoRev Extensions WordPress plugin. A missing capability check on AJAX action vidorev_import_single_video allows unauthenticated users to import arbitrary YouTube videos. Status: patched in Wordfence/patchstack records; remediation is to update to a version with the fix...

PT-2025-11236

Name of the Vulnerable Software and Affected Versions: VidoRev Extensions plugin for WordPress versions up to, and including, 2.9.9.9.9.9.5 Description: The issue is related to unauthorized access due to a missing capability check on the 'vidorev import single video' AJAX action. This allows...