Vendors / Mdc Youtube Downloader Project Mdc Youtube Downloader Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Mdc Youtube Downloader Project records in CISA KEV No Mdc Youtube Downloader Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.10148 · Published 2017-05-23 · No fix listed CWE-22
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC YouTube Downloader mdc-youtube-downloader allows Stored XSS.This issue affects MDC YouTube Downloader: from n/a through <= 3.0.0.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00173 · Published 2025-01-16 · No fix listed CWE-352
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nazmul Ahsan MDC YouTube Downloader mdc-youtube-downloader allows DOM-Based XSS.This issue affects MDC YouTube Downloa…
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00325 · Published 2024-11-19 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High2 Medium1 Low0 No CVSS0