Video Embedder

Video Embedder has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Video Embedder has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nguyen Xuan Chien. Video Embedder is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Video Embedder vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-31458

Video Embedder <= 1.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv1.8

Video Embedder

forsgren

Author

forsgren

5.0(1)
100/100
Last Updated
2025-04-02 (2y ago)
Active Installs
800+
Downloads
67,704
Requires WP
2.8+
Requires PHP
5.2+
Tested up to
WP 6.7.7
Created
2008-04-06 (19y ago)

This is a plugin for WordPress that makes it easy to embed movies from various sources, such as YouTube. The benefit with this plugin is that you don’t have to paste some strange video embed code into your WordPress post, all you need is the ID of the video. As a bonus none of the videos embedded with Video Embedder will break your precious validated WordPress based site, all of the movies will show up nice and clean. Another advantage is that you can manage the settings for all of your embedded movies from the WordPress settings for Video Embedder, the properties for all the movies will be updated instantly as soon as you save the settings. Have you changed the layout for your WordPress blog? No sweat, Video Embedder makes it a breeze to change the dimensions of all your embedded videos no matter what service they are embedded from. Are you using another WordPress plugin for managing your YouTube movies or any of the other services that Video Embedder has support for today? Most likely it is very easy to make Video Embedder take care of those videos as well. Just edit the tag Video Embedder uses to match your old plugin and you are done. Supported video sites YouTube Dailymotion Vimeo Video Embedder can also embed the following file formats: Quicktime movies Windows Media movies Feedback Are you missing a feature? Have you encountered any problem with the plugin? Then go to the homepage for Video Embedder and leave a comment.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C