TI-2022-26401 CVE-2022-50949 · GHSA-q4wj-2jvw-grh2WordPress Plugin Videos sync PDF 1.7.4 Stored XSSPriority MEDIUM 56WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting unsanitized mov, pdf, mp4, webm, and ogg parameter…CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00191 · Published 2026-05-10 · No fix listed CWE-79