Approved changes feed: RSS · Atom

cpe:2.3:a:pressaholic:wordpress_video_robot:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPressaholic (2f7607ac-60ab-57b6-aeff-e9d696a7fa9b)
ProductWordpress Video Robot (210c004a-280f-554f-b10d-9e12e7d51c87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9192 vulnerable 2026-06-08 07:00:26.870772 WP Video Robot <= 1.20.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update
HIGH (8.8)
The WordPress Video Robot - The Ultimate Video Importer plugin for WordPress is vulnerable to privilege escalation due to insufficient validation on user meta that can be updated in the wpvr_rate_request_result() function in all versions up to, and including, 1.20.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to update their user meta on a WordPress site. This can be leveraged to update their capabilities to that of an administrator.
Published: 2024-11-16T03:20:44.515Z
Updated: 2026-04-08T16:44:14.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52431 vulnerable 2026-06-08 06:52:15.160541 WordPress WP Video Robot plugin <= 1.20.0 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pressaholic WordPress Video Robot - The Ultimate Video Importer allows SQL Injection.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20.0.
Published: 2024-11-18T14:37:54.275Z
Updated: 2026-04-28T16:10:42.055Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.