CVE-2021-24395: Improper Neutralization of Special Elements used in an SQL Command

The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...