Skip to content
OpenAdvisories

Vendor

websmokers

1 known vulnerabilities.

Products

ZD YouTube FLV Player 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2024-2663

    ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery

    The ZD YouTube FLV Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.6 via the $_GET['image'] parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary lo…

    websmokers ZD YouTube FLV Player Web / CMS