Vulnerabilities

TI-2025-38935 CVE-2025-62746 · GHSA-g5pq-3mc4-93fw

WordPress Featured Video for WordPress – VideographyWP plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeFlavors Featured Video for WordPress – VideographyWP videographywp allows Stored XSS.This issue affects Featured V…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00154 Published 2025-12-30 No fix listed CWE-79

TI-2023-14334 CVE-2023-30498 · GHSA-3v43-8vv8-27j2

WordPress Vimeotheque Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodeFlavors Vimeotheque: Vimeo WordPress Plugin <= 2.2.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-15 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Featured Video for WordPress – VideographyWP plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability

WordPress Vimeotheque Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)