Vimeotheque – Vimeo WordPress Plugin & Video Gallery
Vimeotheque – Vimeo WordPress Plugin & Video Gallery has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.5 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, SQL Injection.
Every one of the 3 issues recorded for Vimeotheque – Vimeo WordPress Plugin & Video Gallery has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Vimeotheque – Vimeo WordPress Plugin & Video Gallery is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-30806Vimeotheque <= 2.3.4.2 - Authenticated (Contributor+) SQL Injection
Read the full analysisVulnerability Records

Vimeotheque – Vimeo WordPress Plugin & Video Gallery
Author
Constantin Boiangiu
The Vimeo plugin for WordPress that imports, embeds, and organizes your videos Vimeotheque helps you bring Vimeo into WordPress the right way: import videos as posts, auto-sync collections (channels, showcases, portfolios, folders, user uploads), and display beautiful, responsive players and playlists with Gutenberg blocks or shortcodes. Perfect for membership sites, portfolios, online courses and video libraries. Highlights – Import & Sync – Single videos or bulk from channels, showcases, groups, portfolios, folders, user uploads, or Vimeo search. – Video as Content – Creates complete WP posts (title, description, thumbnail, embed) using a dedicated vimeo-video post type. – Blocks & Shortcodes – Add single videos, set video position in posts, or build playlists with native Gutenberg blocks. Classic Editor shortcode included. – Responsive & Fast – Uses the latest Vimeo HTML5 player, lazy-load options, “one-video-at-a-time” playback to avoid conflicts, and a no-tracking embed parameter. – Elementor-friendly – Works cleanly inside Elementor layouts; playlists and single embeds drop into any section/column. – Templates (optional) – Enable the plugin’s template system or override in your theme for full design control. Use cases – Membership / LMS – Embed lessons and restrict access with your membership/LMS plugin. – Portfolio / Showcase – Auto-sync a Vimeo showcase/portfolio to your site. – Blog / Magazine – Import as posts and surface videos in archives and widgets. PRO adds even more Automatic bulk imports (schedule & hands-off sync). Private video imports. Import as regular posts (not just the custom post type). Video theme compatibility and priority support. Live demo & Docs – Live demo – Knowledge Base – Getting started with Vimeo OAuth Blocks This plugin provides the following blocks: 1. Vimeotheque – Video Position (place the player inside single video posts) 2. Vimeotheque – Single Video (embed a specific Vimeo video anywhere) 3. Vimeotheque – Playlist (build playlists from imported videos) Troubleshooting Tested with the latest WordPress and default themes across major browsers and mobile. If something looks off, please open a support request and include theme, WP version, and browser/device details.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C