Low · 3.4 CVE-2025-66062 EUVD-2025-198479GHSA-mc2f-6pf4-67j7

WordPress WP YouTube Lyte plugin <= 1.7.28 - Open Redirection vulnerability

Published Nov 21, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Frank Goossens Product: WP YouTube Lyte

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Frank Goossens WP YouTube Lyte wp-youtube-lyte allows Phishing.This issue affects WP YouTube Lyte: from n/a through <= 1.7.28.

Affected products

Vendor	Product	Affected	Fixed
Frank Goossens	WP YouTube Lyte	≤ 1.7.28	—

References

https://patchstack.com/database/Wordpress/Plugin/wp-youtube-lyte/vulnerability/wordpress-wp-youtube-lyte-plugin-1-7-28-open-redirection-vulnerability?_s_id=cve vdb-entry