CVE-2026-1631: Unknown Feeds For YouTube YouTube Video, Channel, And Gallery Plugin

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4 is vulnerable to unauthorized modification of the Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4's license key due to a missing capability check on the 'actions' function. This makes it possible for subscribers and above delete the license key.

Affected products

• Unknown Feeds For YouTube YouTube Video, Channel, And Gallery Plugin: before 2.6.4 (fixed in 2.6.4)

Published 2026-05-18. Last modified 2026-06-17.