Vulnerabilities / Really Simple Featured Video
Really Simple Featured Video vulnerabilities
Advisories WPSec published for Really Simple Featured Video for Posts, Pages & WooCommerce Products. Other sources may list more. Its attack surface: Really Simple Featured Video on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2408 | Really Simple Featured Video <= 1.1.0 - Authenticated (Contributor+) Insecure Direct Object Reference to Attachment Exposure via Featured Video and Poster | Medium 4.3 | 1.2.0 |
| 2026-11-03 | WPSEC-2026-2407 | Really Simple Featured Video <= 1.1.0 - Authenticated (Contributor+) Sensitive Information Exposure via Featured Video Block Preview REST Endpoint | Medium 4.3 | 1.2.0 |
| 2026-11-03 | WPSEC-2026-2406 | Really Simple Featured Video <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title in CIX Gallery Template | Medium 4.9 | 1.2.0 |
License: CC BY 4.0