Video List Manager
Video List Manager has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 4 disclosures.
The most common weakness is SQL Injection, behind 3 of the records (60%). Other recurring categories include Cross-Site Scripting, Missing Authorization.
None of the 5 issues recorded for Video List Manager have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2023.
3 independent researchers contributed these findings, most of them (2) reported by Chu The Anh. Video List Manager is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.4.21.
CVE-2025-52831Video List Manager <= 1.7 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records
Video List Manager
Author
thanhtungtnt
Video List Manager is the plugin for WordPress, created by Tung Pham (email: tungpham.bh@gmail.com). It helps your site display videos easily with lightbox effect easily. Especially, all your videos will be fitted on all themes. Read more at: http://videolistmanager.blogspot.com/ Main Features: Display videos Support Youtube, Vimeo, Dailymotion Video Using colorbox jquery as a lightbox effect Support 5 colorbox skins Fit all layouts Share links via facebook, twitter, pinterest Tutorial: http://www.youtube.com/watch?v=R_0BmfKC1Jw Arbitrary section CREDIT Copyright: Tung Pham © 2012 – 2020 Email: tungpham.bh@gmail.com This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA SHORTCODES EXAMPLE: Show a video list with category id = 4 : [tnt_video_list id=4] (default: 2 columns, 4 videos per page, width: 480, height: 360) Show a video list with category id = 4, 3 columns, 10 videos per page, width: 520px, height: 420px : [tnt_video_list id=4 col=”3″ limit=”10″ width=”520″ height=”420″] Show a video with video id = 3, width: 400, height: 300 [tnt_video id=3 width=”400″ height=”300″] Read more at: http://videolistmanager.blogspot.com/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C