Wpdevart Youtube Embed\, Playlist And Popup vulnerabilities

2 vulnerabilities

Known vulnerabilities in Wpdevart Youtube Embed\, Playlist And Popup, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2021-24464unknownyoutube embed, playlist and popup by wpdevart+2
EPSS score
0.62%
The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue.5.9CVE-2023-24002wordpressyoutube-video-player+2
EPSS score
0.39%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions.