Download buttons for Youtube videos

Download buttons for Youtube videos has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Download buttons for Youtube videos has a vendor fix available, so running the current release closes it.

All of these findings were reported by WPScanTeam. Download buttons for Youtube videos is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Download buttons for Youtube videos vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Download buttons for Youtube videos <= 1.03 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Download buttons for Youtube videos banner
Latestv1.20

Download buttons for Youtube videos

Puvox Software

Author

Puvox Software

0.0(0)
0/100
Last Updated
2025-12-14 (9mo ago)
Active Installs
10+
Downloads
3,022
Requires WP
6.0+
Requires PHP
0+
Tested up to
WP 6.5.10
Created
2020-12-16 (6y ago)

[ ✅ 𝐒𝐄𝐂𝐔𝐑𝐄 𝐏𝐋𝐔𝐆𝐈𝐍𝐒 b𝓎 𝒫𝓊𝓋𝑜𝓍 ] : • Revised for security to be reliable and free of vulnerability holes. • Efficient, not to add any extra load/slowness to site. • Don’t collect private data. Plugin Description You can add Audio & Video download buttons for any Youtube Video, using shortcodes [youtube_download_button id="XYXYXYXYXYX"]. Also, programattic approach is possible with do_shortcode('[...]'). WARNING Downloading from youtube is generally considered as an illegal action (unless you have rights to do so (as defined in their Terms Of Service), which might aris legal complications, copyright penalties or other troubles. So, ensure you do not offer users to download the videos, for which you do not have a right to do so. You should refer to youtube Terms Of Service and also some notes cen be found here and here about Fair Use. This plugin is intended to be used only by a very narrow-range of customers, who are allowed to download their targeted videos. We take no responsibility for the misuse of this plugin ! Available Options See all available options and their description on plugin’s settings page.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C