TI-2021-06687 CVE-2021-24395 · GHSA-7w7m-m5q2-wx8mEmbed Youtube Video <= 1.0 - Authenticated SQL InjectionPriority LOW 35The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01547 · Published 2021-09-06 · No fix listed CWE-89