WordPress plugin

YouTube Embed, Playlist and Popup by WpDevArt security & vulnerabilities

Q: Does YouTube Embed, Playlist and Popup by WpDevArt have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in YouTube Embed, Playlist and Popup by WpDevArt: 3 medium. At least one is not fixed in the latest version.

Q: How do I check which version of YouTube Embed, Playlist and Popup by WpDevArt I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent YouTube Embed, Playlist and Popup by WpDevArt vulnerability?

CVE-2025-2537, published Jul 3, 2025: Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library. Severity: Medium (CVSS 6.4).

Q: Is any YouTube Embed, Playlist and Popup by WpDevArt vulnerability listed in CISA KEV?

No. None of the known YouTube Embed, Playlist and Popup by WpDevArt vulnerabilities is currently listed in the CISA KEV catalog.

youtube-video-player— active installsLast vulnerability Jul 3, 2025

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

3Known vulnerabilities

Critical0
High0
Medium3
Low0

Vulnerabilities per year

All YouTube Embed, Playlist and Popup by WpDevArt vulnerabilities

YouTube Embed, Playlist and Popup by WpDevArt vulnerabilities
Severity	Vulnerability	CVE	Published
Medium6.4	Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library ≤3.59.11Update to 3.59.12	CVE-2025-2537	Jul 3, 2025
Medium4.4	Authenticated (Admin+) Stored Cross-Site Scripting ≤2.6.3Update to 2.6.4	CVE-2023-24002	Jan 23, 2023
Medium6.4	Contributor+ Stored Cross-Site Scripting <2.3.9Update to 2.3.9	CVE-2021-24464	Jun 28, 2021

Medium6.4
Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library
≤3.59.11Update to 3.59.12
CVE-2025-2537Jul 3, 2025
Medium4.4
Authenticated (Admin+) Stored Cross-Site Scripting
≤2.6.3Update to 2.6.4
CVE-2023-24002Jan 23, 2023
Medium6.4
Contributor+ Stored Cross-Site Scripting
<2.3.9Update to 2.3.9
CVE-2021-24464Jun 28, 2021

YouTube Embed, Playlist and Popup by WpDevArt: common questions

Does YouTube Embed, Playlist and Popup by WpDevArt have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in YouTube Embed, Playlist and Popup by WpDevArt: 3 medium. At least one is not fixed in the latest version.

How do I check which version of YouTube Embed, Playlist and Popup by WpDevArt I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent YouTube Embed, Playlist and Popup by WpDevArt vulnerability?

CVE-2025-2537, published Jul 3, 2025: Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library. Severity: Medium (CVSS 6.4).

Is any YouTube Embed, Playlist and Popup by WpDevArt vulnerability listed in CISA KEV?

No. None of the known YouTube Embed, Playlist and Popup by WpDevArt vulnerabilities is currently listed in the CISA KEV catalog.