Skip to content
OpenAdvisories

Vendor

macbookandrew

2 known vulnerabilities.

Products

WP YouTube Live 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-53261

    WordPress WP YouTube Live plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in macbookandrew WP YouTube Live wp-youtube-live allows Cross Site Request Forgery.This issue affects WP YouTube Live: from n/a through <= 1.10.0.

    macbookandrew WP YouTube Live
  • Medium 6.1
    CVE-2022-1187

    WP YouTube Live <= 1.7.21 - Reflected Cross-Site Scripting

    The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data found in the ~/inc/admin.php file which allows unauthenticated attackers to inject arbitrary web scripts in versions up to, and including, 1.7.21.

    macbookandrew WP YouTube Live