Wpdevart YouTube Embed, Playlist And Popup vulnerabilities

2 CVEs affecting Wpdevart YouTube Embed, Playlist And Popup, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-24002, published 2023-04-06.

More from Wpdevart.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-24464, published 2021-08-02. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as…
• CVE-2023-24002, published 2023-04-06. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions.