wordpress_video_robot vulnerabilities

2 known vulnerabilities in wordpress_video_robot from Pressaholic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WordPress Video Robot - The Ultimate Video…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-52431Nov 18, 2024Pressaholic

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pressaholic WordPress Video Robot - The Ultimate Video Importer allows SQL Injection.This issue affects WordPress Video Robot - The Ultimate Video Importer: f

• 8.8 High severity

  WordPress Video Robot - The Ultimate Video…: Improper Privilege Management

  CVE-2024-9192Nov 16, 2024Pressaholic

  The WordPress Video Robot - The Ultimate Video Importer plugin for WordPress is vulnerable to privilege escalation due to insufficient validation on user meta that can be updated in the wpvr_rate_request_result() function in all versions up to, and including,