AnyClip Luminous Studio
AnyClip Luminous Studio has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
None of the 2 issues recorded for AnyClip Luminous Studio have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. AnyClip Luminous Studio is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.0.
CVE-2025-57910AnyClip Luminous Studio <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

AnyClip Luminous Studio
Author
AnyClip Video Platform
Search and manage video content from your AnyClip account and seamlessly integrate players, clips and playlists into your WordPress-powered site with the AnyClip WordPress Plugin. Drawing upon the full power of AnyClip’s Luminous Video Platform, AnyClip’s WordPress plugin integrates with studio workflows, using AI content data to empower easy content search, management, measurement and distribution. Features include: – Embed videos directly to article pages quickly and easily – Create video playlists and embed to article pages quickly and easily – View historic content performance data at the time of clip selection to spotlight videos known to be most interesting to your audience – View recommendations for relevant, top-performing or most-recent videos to build more engaging playlists – Track clip performance by engagement, revenue performance and other metrics – AI-Powered content search allows for instant access and easy navigation of the to the entirety of your AnyClip owned and licensed content library
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C