Vulnerabilities

TI-2025-17406 CVE-2025-23639 · GHSA-39w4-5q2q-f2p2

WordPress MDC YouTube Downloader plugin <= 3.0.0 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC YouTube Downloader mdc-youtube-downloader allows Stored XSS.This issue affects MDC YouTube Downloader: from n/a through <= 3.0.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00173 Published 2025-01-16 No fix listed CWE-352

TI-2024-34779 CVE-2024-51875 · GHSA-wrrw-gvg8-cw7v

WordPress MDC YouTube Downloader plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nazmul Ahsan MDC YouTube Downloader mdc-youtube-downloader allows DOM-Based XSS.This issue affects MDC YouTube Downloa…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00325 Published 2024-11-19 No fix listed CWE-79

TI-2015-04603 CVE-2015-5469 · GHSA-ff9c-2v27-xqmf

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for…

MEDIUM 45

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.10148 Published 2017-05-23 No fix listed CWE-22

Vulnerabilities

Filters

WordPress MDC YouTube Downloader plugin <= 3.0.0 - CSRF to Stored XSS vulnerability

WordPress MDC YouTube Downloader plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for…