WordPress security by component

ZD YouTube FLV Player

Plugin description

ZD YouTube FLV Player is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 30, 2024; the highest CVE/CNA score is 8.3.

Plugin slug: zd-youtube-flv-player

Latest vulnerability

CVE-2024-2663: ZD YouTube FLV Player: Server-side request forgery

ZD YouTube FLV Player is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests.

PublishedApr 30, 2024

Safe version guidanceSee mitigation notes

		Safe version
Apr 30, 2024	CVE-2024-2663 ZD YouTube FLV Player: Server-side request forgery ZD YouTube FLV Player is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE8.3 NVDPending