Videopack
Videopack has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2012 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Code Injection, Exposure Of Sensitive Information To An Unauthorized Actor.
Every one of the 5 issues recorded for Videopack has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Videopack is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2012-1785Videopack (formerly Video Embed & Thumbnail Generator) < 2.0 - Remote Code Execution
Read the full analysisVulnerability Records
Videopack
Author
Kyle Gilman
A plugin to make video players, thumbnails, multiple resolutions, and video galleries. This video plugin adds several options to any video uploaded to the WordPress Media Library. If your video can be played natively in your browser, or if you have FFMPEG installed on your server (optional), you can generate thumbnails from your video. Using either the “Generate” or “Randomize” buttons will create a selection to choose from. Click “Insert into Post” and you’ll get a shortcode in the post editor that will make a flexible, responsive video player. If you provide multiple H.264 resolutions, Videopack can automatically select the one closest to the size of the player or a resolution of your choice, and provide a button for users to select the resolution manually. If FFMPEG is installed on your server, Videopack can encode the videos automatically. You can also use Videopack to create a popup video gallery. The shortcode uses options similar to the WordPress image gallery shortcode. In its simplest form it will create a gallery of all videos attached to the post. You can now add advertisements to your videos using the Videopack Ads premium add-on which you can purchase from the Add-ons tab of the Videopack Settings page or on the Videopack website. Not compatible with the Block Editor. Please continue to use the Classic Editor. Visit the Videopack Documentation pages for more info.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C