1865 matches found
CVE-2025-31008 WordPress YouTube Embed plugin <= 5.3.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Embeds For YouTube Plugin Support YouTube Embed youtube-embed allows Stored XSS.This issue affects YouTube Embed: from n/a through = 5.3.1...
CVE-2025-31008
CVE-2025-31008 is an authenticated, stored XSS affecting the YouTube embeds for WordPress plugin (Embeds for YouTube). Public details in Wordfence indicate an authenticated (Admin+) Stored Cross-Site Scripting vulnerability in Embeds for YouTube, with affected range including version up to 5.3.1....
PT-2025-15724 · Unknown · Youtube Embed
Name of the Vulnerable Software and Affected Versions: YouTube Embed versions n/a through 5.3.1 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. Specifically, it is a Stored XSS vulnerability in the YouTube...
WordPress plugin YouTube Embed 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Malicious code in google-youtube (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e1ecb598c9ac0e7240a341182e2f54597b4789e72942b075021ced9bf81aef35 The OpenSSF Package Analysis project identified 'google-youtube' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-3177 Malicious code in google-youtube (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e1ecb598c9ac0e7240a341182e2f54597b4789e72942b075021ced9bf81aef35 The OpenSSF Package Analysis project identified 'google-youtube' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Neptune RAT Variant Spreads via YouTube to Steal Windows Passwords
A new Neptune RAT variant is being shared via YouTube and Telegram, targeting Windows users to steal passwords and deliver additional malware components...
CVE-2025-32183
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playlist For YouTube: from n/a through = 6.8...
CVE-2025-32183
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playlist For YouTube: from n/a through = 6.7.1...
CVE-2025-32183 WordPress Video Playlist For YouTube plugin <= 6.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Galaxy Weblinks Video Playlist For YouTube allows Stored XSS. This issue affects Video Playlist For YouTube: from n/a through 6.6...
CVE-2025-32183 WordPress Video Playlist For YouTube plugin <= 6.7.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playlist For YouTube: from n/a through = 6.7.1...
CVE-2025-32183
CVE-2025-32183 affects the Video Playlist For YouTube WordPress plugin. The vulnerability is described as a Stored Cross-Site Scripting (XSS) due to improper input neutralization during web page generation, impacting Video Playlist For YouTube versions up to 6.6 (per the initial description). Con...
WordPress plugin Video Playlist For YouTube 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-31743
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpszaki Lightweight and Responsive Youtube Embed lightweight-and-responsive-youtube-embed allows Stored XSS.This issue affects Lightweight and Responsive Youtube Embed: from n/a through = 1.0.0...
WordPress Lightweight and Responsive Youtube Embed plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Lightweight and Responsive Youtube Embed versions = 1.0.0...
WordPress Lightweight and Responsive Youtube Embed Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Lightweight and Responsive Youtube Embed versions = 1.0.0...
CVE-2025-31744
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpszaki Lightweight and Responsive Youtube Embed lightweight-and-responsive-youtube-embed allows Stored XSS.This issue affects Lightweight and Responsive Youtube Embed: from n/a through = 1.0.0...
CVE-2025-31743
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpszaki Lightweight and Responsive Youtube Embed lightweight-and-responsive-youtube-embed allows Stored XSS.This issue affects Lightweight and Responsive Youtube Embed: from n/a through = 1.0.0...
CVE-2025-31743
CVE-2025-31743 concerns a cross-site scripting vulnerability in the Lightweight and Responsive Youtube Embed WordPress plugin. The initial entry notes a Stored XSS in this plugin affecting versions from 0.1.0 up to 1.0.0, with exploitation described as Stored XSS during web page generation. Conne...