CVE-2026-84937

CVE-2026-84937 affects the Video Player for YouTube WordPress plugin in versions before 2.1.0 . The plugin fails to properly sanitise and escape user-supplied input before using it in a SQL statement within the ytp_ajax endpoint. Users with the Contributor role or above can exploit this to perfor...