video_player_for_youtube vulnerabilities

CVEs whose affected-version data names the video_player_for_youtube package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85007Low· 3.8

1w ago

YT Player < 2.1.4 - Contributor+ Missing Authorization via ytp_ajax

The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset AJAX handler, allowing users with the Contributor role and above to read the site-wide player-preset configuration, and …

▾ SunlitEPSS 0.15%via CVEORG