Skip to content
OpenAdvisories

Vendor

pressaholic

3 known vulnerabilities.

Products

WordPress Video Robot - The Ultimate Video Importer 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-39409

    WordPress WordPress Video Robot - The Ultimate Video Importer plugin <= 1.20.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pressaholic WordPress Video Robot - The Ultimate Video Importer.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20…

    pressaholic WordPress Video Robot - The Ultimate Video Importer Web / CMS
  • High 8.8
    CVE-2024-9192

    WP Video Robot <= 1.20.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update

    The WordPress Video Robot - The Ultimate Video Importer plugin for WordPress is vulnerable to privilege escalation due to insufficient validation on user meta that can be updated in the wpvr_rate_request_result() function in all versions up to, and including,…

    pressaholic WordPress Video Robot - The Ultimate Video Importer Web / CMS