Embedplus vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Embedplus products: 1 record(s), with severity, exploitation and fixes.

Youtube Embed Plus 1

Exploited only (KEV) →

CVE-2026-39485 Medium · 4.3 CWE-862 Apr 8, 2026

WordPress Youtube Embed Plus plugin <= 14.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in embedplus Youtube Embed Plus youtube-embed-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Embed Plus: from n/a through <= 14.2.4.