Lightweight and Responsive Youtube Embed
Lightweight and Responsive Youtube Embed has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
None of the 2 issues recorded for Lightweight and Responsive Youtube Embed have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. Lightweight and Responsive Youtube Embed is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.
CVE-2025-31743Lightweight and Responsive Youtube Embed <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Lightweight and Responsive Youtube Embed
Author
wpszaki
If you are embedding Youtube video(s) into your site then you will need this plugin. As you may (or may not) know the default Youtube embed code is not responsive and in order to load the player itself your browser has to download more than 1MB of data from Youtube’s servers. That is way too much and this is the reason why we made this plugin. A video player has to be lightweight and responsive. Period. This plugin is replacing the default Youtube player with the video’s high quality thumbnail and a play button. The real player and the video won’t load until you click on the play button or the thumbnail itself. With this easy trick you will have a much lighter and faster website and the thumbnail + the actual player will be responsive too. Our plugin is only 60KB without any extra library or unnecessary function. If you are speed-optimizing your site or if you want to reduce the loading times of your pages then you are at the right place. This plugin will: Make all of the embedded Youtube videos responsive automatically Will reduce the size of your pages (where you have embedded videos) Will make your site faster Will improve the user experience You can also: Manually insert a different thumbnail for each embedded video with the ‘thumb_url’ parameter. [youtube_embed url=”video_url” thumb-url=”custom_thumb_url”] Manually set a different width for each video with the ‘width’ parameter. [youtube_embed url=”video_url” width=”50″] Manually align each video to left, right or center with the ‘align’ parameter. [youtube_embed url=”video_url” align=”center”] Disable the related videos Disable the video controls Disable the fullscreen option Align the videos globally or individually Set the custom video width for all videos or to just a single video with a shortcode parameter Comparison Here’s a quick comparison with the built-in TwentySeventeen theme (without any other plugin). We placed a default Youtube video embed code in a new and empty page, ran the tests and then replaced it with our solution before running the tests again. Total page size with the traditional Youtube embed code: 2.18MB Total page size with our lightweight & responsive embedder: 472KB Page load time with the traditional Youtube embed code: 5.33s Page load time with our lightweight & responsive embedder: 2.52s
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C