Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-68584 EUVD-2025-205251GHSA-6r9j-fpr7-g9xg

WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site Request Forgery (CSRF) vulnerability

Published Dec 24, 2025 · Updated Nov 4, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vimeo-video-post-lite allows Cross Site Request Forgery.This issue affects Vimeotheque: from n/a through <= 2.3.5.2.

Affected products

VendorProductAffectedFixed
Constantin Boiangiu Vimeotheque ≤ 2.3.5.2 —

References