Approved changes feed: RSS · Atom

cpe:2.3:a:wpdevart:youtube_embed,_playlist_and_popup_by_wpdevart:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpdevart (62458400-5314-5c71-819c-4b29c90460da)
ProductYoutube Embed, Playlist And Popup By Wpdevart (63bb3908-d25f-5dfd-b2ff-5c5c7fb2d027)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2537 vulnerable 2026-06-03 15:00:25.774433 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library
MEDIUM (6.4)
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled ThickBox JavaScript library (version 3.1) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-07-03T12:23:08.822Z
Updated: 2026-04-08T16:54:56.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24002 vulnerable 2026-06-03 14:49:29.231132 WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions.
Published: 2023-04-06T08:04:24.910Z
Updated: 2026-04-28T16:08:05.098Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.