Forums
Home / Plugin: Video Gallery - YouTube Playlist, Channel Gallery by YotuWP / Critical vulnerability reported by WordFence
(@jamminjames)
9 months, 1 week ago
Unauthenticated Local File Inclusion critical vulnerability reported by WordFence for YotuWP:
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/yotuwp-easy-youtube-embed/video-gallery-youtube-playlist-channel-gallery-by-yotuwp-1313-unauthenticated-local-file-inclusion
(@jamesfeudo)
9 months ago
Does anyone know if a fix is in progress? I’ve reached out to the developer and haven’t heard back and there’s no information on the plugin’s website about a fix.
Apparently not. I switched to ‘YouTube WordPress Plugin by Embed Plus.’