Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-44590 EUVD-2022-47528GHSA-x6f3-mx3x-9q4m

WordPress Simple Video Embedder plugin <= 2.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Published Nov 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: James Lao Product: Simple Video Embedder (WordPress plugin) Category: Web / CMS

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in James Lao's Simple Video Embedder plugin <= 2.2 on WordPress.

Affected products

VendorProductAffectedFixed
James Lao Simple Video Embedder (WordPress plugin) <= 2.2 – ≤ 2.2 —

References