Youtube Feed Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:awesome_motive:youtube_feed_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Awesome Motive (50ff04bf-5961-56c9-a5ae-90395761d117) |
|---|---|
| Product | Youtube Feed Pro (88445238-fe6a-5cc8-9b35-9612d3ce400e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-12002 |
vulnerable | 2026-06-08 07:04:29.535157 |
Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversal
MEDIUM (5.9)
The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.6.0 via the 'sby_check_wp_submit' AJAX action. This is due to insufficient sanitization of user-supplied data and the use of that data in a file operation. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information, granted the 'Save Featured Images' setting is enabled and 'Disable WP Posts' is disabled. Note: This vulnerability only affects the Pro version of Feeds for YouTube.
Published: 2026-01-17T02:22:33.224Z
Updated: 2026-04-08T17:30:55.679Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.