CVE-2026-66637

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66637

Contributor-level users can inject unsanitized JavaScript into the WordPress Featured Video Plus plugin (versions ≤ 2.3.3), enabling stored XSS that executes in victims' browsers (CVSS 6.5, medium). No fix version or exploit details are provided; monitor the Patchstack advisory for updates.

CVE-2026-66637 WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66637

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

EUVD-2026-60922

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Featured Video Plus versions = 2.3.3...

PT-2026-77065

Name of the Vulnerable Software and Affected Versions Featured Video Plus versions prior to 2.3.4 Description Cross Site Scripting XSS allows an attacker with contributor privileges to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than 2.3.3...

CVE-2026-66685

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

CVE-2026-66685

The connected documents identify a vulnerability in the WordPress Featured Video Plus plugin, affected versions

CVE-2026-66685 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

EUVD-2026-53896

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Featured Video Plus versions = 2.3.3...

CVE-2025-62746

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeFlavors Featured Video for WordPress - VideographyWP videographywp allows Stored XSS.This issue affects Featured Video for WordPress - VideographyWP: from n/a through = 1.0.18...

EUVD-2025-205811

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeFlavors Featured Video for WordPress & VideographyWP allows Stored XSS.This issue affects Featured Video for WordPress & VideographyWP: from n/a through 1.0.18...

CVE-2025-62746 WordPress Featured Video for WordPress – VideographyWP plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeFlavors Featured Video for WordPress VideographyWP videographywp allows Stored XSS.This issue affects Featured Video for WordPress VideographyWP: from n/a through = 1.0.18...

CVE-2025-62746 WordPress Featured Video for WordPress – VideographyWP plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeFlavors Featured Video for WordPress – VideographyWP videographywp allows Stored XSS.This issue affects Featured Video for WordPress – VideographyWP: from n/a through = 1.0.18...

CVE-2025-62746

The CVE-2025-62746 entry is backed by a connected Wordfence vulnerability report for the WordPress plugin/extension Featured Video for WordPress – VideographyWP. It states an Authenticated Stored Cross-Site Scripting (XSS) flaw affecting the product when using versions up to 1.0.18 (the issue is ...

WordPress Featured Video for WordPress – VideographyWP plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Featured Video for WordPress VideographyWP versions = 1.0.18...

PT-2025-54186

Name of the Vulnerable Software and Affected Versions CodeFlavors Featured Video for WordPress & VideographyWP versions through 1.0.18 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This...

WordPress plugin Featured Video for WordPress & VideographyWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...