Vulnerabilities

TI-2025-42105 CVE-2025-68584 · GHSA-6r9j-fpr7-g9xg

WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vimeo-video-post-lite allows Cross Site Request Forgery.This issue affects Vimeotheque: from n/a through <= 2.3.5.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00131 Published 2025-12-24 No fix listed CWE-352

TI-2025-22076 CVE-2025-30806 · GHSA-5vcc-mv82-47r3

WordPress Vimeotheque plugin <= 2.3.4.2 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vimeo-video-post-lite allows SQL Injection.This issue affects Vimeotheque:…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00457 Published 2025-03-27 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Vimeotheque plugin <= 2.3.4.2 - SQL Injection vulnerability