YouTube

YouTube Embed and YouTube Gallery WordPress Plugin. Embed a responsive video, YouTube channel, playlist gallery, or live stream

More information »

Potentially unsafe

Confidence: Medium This plugin has been given a short, targeted code review.

Before using this plugin, you should very carefully consider its potential problems and should conduct a thorough assessment.

More information about this recommendation

Warning: Version 11.8.1 of this plugin has known vulnerabilities

The version of this plugin that this recommendation was based on is known to be vulnerable to attack:

Warning: old version

This recommendation applies to version 11.8.1 of this plugin, but the most recent version is 11.8.2. These findings may no longer be correct.

Findings

  • Does not protect against CSRF. An attacker can change all of the plugin’s settings, including text which is output in the front-end.

Reason for the 'Potentially unsafe' result

The plugin contains or is likely to contain a vulnerability which could be exploited by an end user and which would compromise the site’s confidentiality, integrity or availability:

Read more about our failure criteria.

Fail Unsafe request processing

We conduct these inspections for our own use, and publish them in the hope that they may be useful to others. We don't guarantee that these findings are correct.

Please read this site's terms of service before taking any action based on information published here.

Testers
Tom Adams
Last revised
July 25, 2017
Versions tested
11.8.1
Plugin homepage
YouTube
Other versions

None listed