Advisories · Technology

YouTube Embed, Playlist and Popup by WpDevArt.

Every CVE that names YouTube Embed, Playlist and Popup by WpDevArt among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-2537 CVE record

CVSS 6.4 Medium

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library
- YouTube Embed, Playlist and Popup by WpDevArt
- denis-de-bernardy Auto Thickbox
- Cross-site scripting (XSS)
Not analysed yet 3 Jul 2025
CVE-2023-24002 CVE record

CVSS 5.9 Medium

WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)
- YouTube Embed, Playlist and Popup by WpDevArt
- Cross-site scripting (XSS)
Not analysed yet 6 Apr 2023
CVE-2021-24464 CVE record

YouTube Embed, Playlist and Popup < 2.3.9 - Contributor+ Stored XSS
- YouTube Embed, Playlist and Popup by WpDevArt
- Cross-site scripting (XSS)
Not analysed yet 2 Aug 2021