CVE-2026-1631

5.4 Moyenne

Publiée le 18/05/2026 à 09:16 · Modifiée le 17/06/2026 à 12:16 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4 is vulnerable to unauthorized modification of the Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4's license key due to a missing capability check on the 'actions' function. This makes it possible for subscribers and above delete the license key.

Traduire en français

Produits concernés

Unknown Feeds for YouTube (YouTube video, channel, and gallery plugin)

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L`

Faiblesses (CWE)

CWE-862

Références

https://wpscan.com/vulnerability/b19596c2-69bc-4e15-8632-eb80f4577e3c/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories