WordPress Video Robot - The Ultimate Video Importer vulnerabilities

3 known vulnerabilities in WordPress Video Robot - The Ultimate Video Importer from Pressaholic. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  WordPress Video Robot - The Ultimate Video…: Improper Neutralization of Input During Web Page Generation

  CVE-2025-39409May 19, 2025Pressaholic

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pressaholic WordPress Video Robot - The Ultimate Video Importer.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20.

• 9.8 Critical severity

  WordPress Video Robot - The Ultimate Video…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-52431Nov 18, 2024Pressaholic

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pressaholic WordPress Video Robot - The Ultimate Video Importer allows SQL Injection.This issue affects WordPress Video Robot - The Ultimate Video Importer: f

• 8.8 High severity

  WordPress Video Robot - The Ultimate Video…: Improper Privilege Management

  CVE-2024-9192Nov 16, 2024Pressaholic

  The WordPress Video Robot - The Ultimate Video Importer plugin for WordPress is vulnerable to privilege escalation due to insufficient validation on user meta that can be updated in the wpvr_rate_request_result() function in all versions up to, and including,