Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
embedplus records in CISA KEVNo embedplus vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 29
CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the plugin
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00524 · Published 2017-11-17 · No fix listed CWE-352
Priority LOW 19
Missing Authorization vulnerability in embedplus Youtube Embed Plus youtube-embed-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Embed Plus: from n/a through <= 14…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00204 · Published 2026-04-08 · No fix listed CWE-862
