Import YouTube videos as WP Posts
Import YouTube videos as WP Posts has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Import YouTube videos as WP Posts has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Kévin Mosbahi (Mika). Import YouTube videos as WP Posts is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.
CVE-2025-52802Import YouTube videos as WP Posts <= 2.1 - Missing Authorization
Read the full analysisVulnerability Records
Import YouTube videos as WP Posts
Author
enguerranws
English Version Import YouTube videos as WP Posts is a simple plugin that allow you to search Youtube videos from the admin panel (with keywords, channel or playlist ID) and add the videos you pick to your posts. It’s a simple way : to feed your WordPress website with real content in minutes to display curated content from Youtube on your website to link a playlist or a channel to your website How does it work ? Type a request : keywords, channel ID or playlist ID Fill some parameters : taxonomy to feed, post type to feed, number of results to show Some template tags (%title%, %user%, etc.) are available to customize the content you add to your WordPress website Choose some videos and add them to your website or reject them Works on every themes : it just feed an existing ressource (e.g. : Posts) with selected Youtube content. Available in French and English. Version Française Import YouTube videos as WP Posts est un plugin tout simple qui permet de chercher des vidéos Youtube depuis l’administration de WordPress et de les ajouter à son site rapidement. Quelques utilisations : alimenter un site en quelques minutes avec du vrai contenu venant de Youtube afficher un contenu choisi sur son site faire le lien entre une playlist ou une chaîne Youtube Comment ça marche ? Tapez une requête : mots-clé, ID de playlist, ID de chaîne Réglez quelques paramètres : taxonomie à remplir, post type à remplir, nombre de vidéos à afficher, etc… Il est possible de customiser votre contenu ajouté avec un petit système de template (%title%, %user%, etc.) Une fois votre recherche effectuée, choisissez des vidéos, ajoutez-les à votre site ou rejetez celle qui ne vous plaisent pas. Ça fonctionne avec tous les thèmes : le plugin ajoute les vidéos choisies à un type de ressources existant (ex: Articles).
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C