CyberSecBulletin

Videomerchant vulnerabilities

We track 1 vulnerability in Videomerchant products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 10, 2025.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Videomerchant vulnerabilities

  • 8.8 High severity

    Video Merchant: Unrestricted Upload of File with Dangerous Type

    CVE-2025-14390Videomerchant

    The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4. This is due to missing or incorrect nonce validation on the video_merchant_add_video_file() function. This makes it possible for unauthenticated attackers