Vimeotheque – Vimeo WordPress Plugin & Video Gallery

Vimeotheque – Vimeo WordPress Plugin & Video Gallery has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.5 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, SQL Injection.

Every one of the 3 issues recorded for Vimeotheque – Vimeo WordPress Plugin & Video Gallery has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Vimeotheque – Vimeo WordPress Plugin & Video Gallery is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Vimeotheque – Vimeo WordPress Plugin & Video Gallery vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2025-30806

Vimeotheque <= 2.3.4.2 - Authenticated (Contributor+) SQL Injection

Read the full analysis

Vulnerability Records

3 records
Vimeotheque – Vimeo WordPress Plugin & Video Gallery banner
Latestv2.3.7.1

Vimeotheque – Vimeo WordPress Plugin & Video Gallery

Constantin Boiangiu

Author

Constantin Boiangiu

4.6(26)
92/100
Last Updated
2026-07-15 (2mo ago)
Active Installs
2,000+
Downloads
249,948
Requires WP
5.2+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2013-07-20 (13y ago)

The Vimeo plugin for WordPress that imports, embeds, and organizes your videos Vimeotheque helps you bring Vimeo into WordPress the right way: import videos as posts, auto-sync collections (channels, showcases, portfolios, folders, user uploads), and display beautiful, responsive players and playlists with Gutenberg blocks or shortcodes. Perfect for membership sites, portfolios, online courses and video libraries. Highlights – Import & Sync – Single videos or bulk from channels, showcases, groups, portfolios, folders, user uploads, or Vimeo search. – Video as Content – Creates complete WP posts (title, description, thumbnail, embed) using a dedicated vimeo-video post type. – Blocks & Shortcodes – Add single videos, set video position in posts, or build playlists with native Gutenberg blocks. Classic Editor shortcode included. – Responsive & Fast – Uses the latest Vimeo HTML5 player, lazy-load options, “one-video-at-a-time” playback to avoid conflicts, and a no-tracking embed parameter. – Elementor-friendly – Works cleanly inside Elementor layouts; playlists and single embeds drop into any section/column. – Templates (optional) – Enable the plugin’s template system or override in your theme for full design control. Use cases – Membership / LMS – Embed lessons and restrict access with your membership/LMS plugin. – Portfolio / Showcase – Auto-sync a Vimeo showcase/portfolio to your site. – Blog / Magazine – Import as posts and surface videos in archives and widgets. PRO adds even more Automatic bulk imports (schedule & hands-off sync). Private video imports. Import as regular posts (not just the custom post type). Video theme compatibility and priority support. Live demo & Docs – Live demo – Knowledge Base – Getting started with Vimeo OAuth Blocks This plugin provides the following blocks: 1. Vimeotheque – Video Position (place the player inside single video posts) 2. Vimeotheque – Single Video (embed a specific Vimeo video anywhere) 3. Vimeotheque – Playlist (build playlists from imported videos) Troubleshooting Tested with the latest WordPress and default themes across major browsers and mobile. If something looks off, please open a support request and include theme, WP version, and browser/device details.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C