CVE-2025-54016: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kyle Gilman Videopack video-embed-thumbnail-generator allows DOM-Based XSS.This issue affects Videopack: from n/a through = 4.10.3...

WordPress Video Embed & Thumbnail Generator plugin < 4.7.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Video Embed & Thumbnail Generator plugin versions 4.7.4. Solution Update the WordPress Video Embed & Thumbnail Generator plugin to the latest available version at least 4.7.4...

Vulnerabilities in multiple plugins for WordPress with VideoJS

Hello 3APA3A! These are Cross-Site Scripting vulnerabilities in multiple plugins for WordPress with VideoJS. Earlier I've wrote about vulnerabilities in VideoJS http://seclists.org/fulldisclosure/2013/May/21. This is popular video and audio player, which is used at hundreds thousands of web sites...

CVE-2012-1785

kgcallffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2012-1786

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors...

CVE-2012-1785: Improper Input Validation

kgcallffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors...

PT-2012-3536

Name of the Vulnerable Software and Affected Versions Video Embed & Thumbnail Generator plugin versions prior to 2.0 Description The issue allows remote attackers to execute arbitrary commands. Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve the issue...

PT-2012-3537

Name of the Vulnerable Software and Affected Versions Video Embed & Thumbnail Generator plugin versions prior to 2.0 Description The issue concerns the Media Upload form in the Video Embed & Thumbnail Generator plugin, which allows remote attackers to obtain the installation path. Recommendations...

CVE-2012-1786: Exposure of Sensitive Information to an Unauthorized Actor

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors...