GCVE - cpe:2.3:a:kevin_weber:lazy_load_for

Approved changes feed: RSS · Atom

cpe:2.3:a:kevin_weber:lazy_load_for_videos:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Kevin Weber (`ec8f34e2-4c8c-51a0-917f-e02f3bfe28f0`)
Product	Lazy Load For Videos (`4f74ea30-a22b-5532-abb2-f85248f15270`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-115951`	vulnerable	2026-11-03 10:15:37.503726	WordPress Lazy Load for Videos plugin <= 2.18.11 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Weber Lazy Load for Videos lazy-load-for-videos allows Stored XSS.This issue affects Lazy Load for Videos: from n/a through 2.18.11. Published: 2026-10-26T10:26:34.727Z Updated: 2026-10-26T12:54:34.854Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/lazy-load-for-videos/vulnerability/wordpress-lazy-load-for-videos-plugin-2-18-11-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-45656`	vulnerable	2026-06-08 06:12:43.066401	WordPress Lazy Load for Videos Plugin <= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF) MEDIUM (5.4) Cross-Site Request Forgery (CSRF) vulnerability in Kevin Weber Lazy Load for Videos plugin <= 2.18.2 versions. Published: 2023-10-16T08:54:09.308Z Updated: 2026-04-28T16:08:43.927Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/lazy-load-for-videos/wordpress-lazy-load-for-videos-plugin-2-18-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.