Extension WordPress
Vulnérabilités Feeds for YouTube (YouTube video, channel, and gallery plugin)
Cette page rassemble les failles publiées pour Feeds for YouTube (YouTube video, channel, and gallery plugin), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Feeds for YouTube (YouTube video, channel, and gallery plugin)
5 fiches
Feeds for YouTube (YouTube video, channel, and gallery plugin) < 2.6.4 – Missing Authorization
The Feeds for YouTube (YouTube video, channel, and gallery plugin) plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to 2.6.4. This makes it possible for authenticated…
[*, 2.6.4)
2.6.4
11/06/2026
Feeds for YouTube <= 2.4.0 – Missing Authorization
The Feeds for YouTube (YouTube video, channel, and gallery plugin) plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.4.0. This makes it…
*-2.4.0
2.6.1
06/11/2025
Feeds for YouTube (YouTube video, channel, and gallery plugin) <= 2.2.1 – Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
The Feeds for YouTube (YouTube video, channel, and gallery plugin) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'youtube-feed' shortcode in all versions up to, and including, 2.2.1 due to insufficient input sanitization and…
*-2.2.1
2.2.2
10/07/2024
Feeds for YouTube <= 2.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Feeds for YouTube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube-feed' shortcode in versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
*-2.1
2.1.2
13/09/2023
Smash Balloon Plugins (Various Versions) – Reflected Cross-Site Scripting
Several Smash Balloon Plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via URLs in various versions due to insufficient input sanitization and output escaping with the use of add_query_arg. This makes it possible for unauthenticated attackers to…
*-1.4.1
1.4.2
20/07/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.