TI-2024-02478 CVE-2024-2663 · GHSA-w2hv-73f9-x6qrZD YouTube FLV Player <= 1.2.6 - Server-Side Request ForgeryPriority LOW 36The ZD YouTube FLV Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.6 via the $_GET['image'] parameter.CVSS 3.1HIGH 8.3· Network · No auth · No interaction · EPSS 0.00436 · Published 2024-04-30 · No fix listed CWE-918