Smartideo

Smartideo has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Smartideo has a vendor fix available, so running the current release closes it.

Smartideo is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Smartideo vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

SmartIdeo <= 2.7.0 - Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv2.9.0
5.0(6)
100/100
Last Updated
2026-06-19 (3mo ago)
Active Installs
1,000+
Downloads
100,809
Requires WP
3.5.0+
Requires PHP
0+
Tested up to
WP 6.9.7
Created
2015-01-01 (12y ago)

Smartideo 是为 WordPress 添加对在线视频支持的一款插件(支持手机、平板等设备HTML5播放)。 目前支持YouTube、哔哩哔哩、抖音、腾讯视频、优酷、搜狐视频、56等网站。 直接粘贴视频播放页完整的URL到编辑器(单独一行),就可以加载视频播放器。 详细介绍 https://7yper.com/3639

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C