https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T22:32:50.588900+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2025-12610 cnvd-2025-12610 2026-11-10T22:32:50.589971+00:00 cnvd-2025-12610 https://db.gcve.eu/vuln/fkie_cve-2025-4217 fkie_cve-2025-4217 2026-11-10T22:32:50.589999+00:00

The WP YouTube Video Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ib_youtube' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://db.gcve.eu/vuln/ghsa-42qg-74gw-4v5q GHSA-42qg-74gw-4v5q 2026-11-10T22:32:50.590030+00:00

The WP YouTube Video Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ib_youtube' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.