YouTube Embed vulnerabilities
We track 1 vulnerability in YouTube Embed products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest YouTube Embed vulnerabilities
- 8.8 High severity
YouTube Embed: Improper Neutralization of Input During Web Page Generation
The YouTube Embed WordPress plugin from 10.0 to 10.3 does not perform any authorisation check on one of its AJAX actions, relying only on a nonce it prints on every front-end page, and does not escape the stored data before rendering it, allowing unauthenticat