Vulnerabilities

TI-2025-17576 CVE-2025-23809 · GHSA-rx38-xc89-vgrj

WordPress Blue Wrench Video Widget Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sunil Nanda Blue Wrench Video Widget blue-wrench-videos-widget allows Reflected XSS.This issue affects Blue Wrench Vid…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00282 Published 2025-01-22 No fix listed CWE-79

TI-2013-05588 CVE-2013-6797 · GHSA-mw8f-qp6v-5695

Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the…

LOW 35

Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02884 Published 2013-11-15 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Blue Wrench Video Widget Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the…