Sign in

5.9 Medium

CVE-2023-24002 Auth

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
YouTube Embed, Playlist and Popup by WpDevArt 2.6	earliest → 2.6.3	No fix stated

The 2 CVEs of YouTube Embed, Playlist and Popup by WpDevArt →

CVE-2025-2537 Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled ThickBox… 6.4 Medium

Do you use YouTube Embed, Playlist and Popup by WpDevArt?

Track this CVE Watch YouTube Embed, Playlist and Popup by WpDevArt Check my SBOMs

www.cveye.io/en/cve/CVE-2023-24002

Timeline

Published April 6, 2023
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE