Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-115951 EUVD-2026-109723GHSA-3w39-26hf-72hg

WordPress Lazy Load for Videos plugin <= 2.18.11 - Cross Site Scripting (XSS) vulnerability

Published Oct 26, 2026 · Updated Oct 26, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Weber Lazy Load for Videos lazy-load-for-videos allows Stored XSS.This issue affects Lazy Load for Videos: from n/a through 2.18.11.

Affected products

VendorProductAffectedFixed
Kevin Weber Lazy Load for Videos ≤ 2.18.11 —

References