Video Embedder
Video Embedder has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Video Embedder has a vendor fix available, so running the current release closes it.
All of these findings were reported by Nguyen Xuan Chien. Video Embedder is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-31458Video Embedder <= 1.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Video Embedder
Author
forsgren
This is a plugin for WordPress that makes it easy to embed movies from various sources, such as YouTube. The benefit with this plugin is that you don’t have to paste some strange video embed code into your WordPress post, all you need is the ID of the video. As a bonus none of the videos embedded with Video Embedder will break your precious validated WordPress based site, all of the movies will show up nice and clean. Another advantage is that you can manage the settings for all of your embedded movies from the WordPress settings for Video Embedder, the properties for all the movies will be updated instantly as soon as you save the settings. Have you changed the layout for your WordPress blog? No sweat, Video Embedder makes it a breeze to change the dimensions of all your embedded videos no matter what service they are embedded from. Are you using another WordPress plugin for managing your YouTube movies or any of the other services that Video Embedder has support for today? Most likely it is very easy to make Video Embedder take care of those videos as well. Just edit the tag Video Embedder uses to match your old plugin and you are done. Supported video sites YouTube Dailymotion Vimeo Video Embedder can also embed the following file formats: Quicktime movies Windows Media movies Feedback Are you missing a feature? Have you encountered any problem with the plugin? Then go to the homepage for Video Embedder and leave a comment.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C