YourChannel: Everything you want in a YouTube plugin.

YourChannel: Everything you want in a YouTube plugin. has 10 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 10 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 7.4 out of 10. Severity breakdown: 0 critical and 2 high. 2023 was the busiest year with 10 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 4 of the records (40%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 10 issues recorded for YourChannel: Everything you want in a YouTube plugin. has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (7) reported by Marco Wotschka. YourChannel: Everything you want in a YouTube plugin. is installed on roughly 9,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all YourChannel: Everything you want in a YouTube plugin. vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.4CVE-2022-4833

YourChannel <= 1.2.1 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

10 records


2023-04-18 00:00	YourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting YourChannel <= 1.2.5	`CVE-2023-1869`	5.5 Medium	Marco Wotschka	Yes
2023-04-05 00:00	YourChannel <= 1.2.3 - Missing Authorization to Plugin Settings Reset YourChannel <= 1.2.3	`CVE-2023-1865`	6.5 Medium	Marco Wotschka	Yes
2023-04-05 00:00	YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Channel Reset YourChannel <= 1.2.4	`CVE-2023-1866`	5.4 Medium	Marco Wotschka	Yes
2023-04-05 00:00	YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Settings Change YourChannel <= 1.2.4	`CVE-2023-1867`	5.4 Medium	Marco Wotschka	Yes
2023-04-05 00:00	YourChannel <= 1.2.3 - Missing Authorization to Plugin Cache Reset YourChannel <= 1.2.3	`CVE-2023-1868`	6.5 Medium	Marco Wotschka	Yes
2023-04-05 00:00	YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Update YourChannel <= 1.2.4	`CVE-2023-1870`	4.3 Medium	Marco Wotschka	Yes
2023-04-05 00:00	YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Reset YourChannel <= 1.2.4	`CVE-2023-1871`	5.4 Medium	Marco Wotschka	Yes
2023-01-13 00:00	YourChannel <= 1.2.1 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting YourChannel <= 1.2.1	`CVE-2022-4833`	7.4 High	István Márton	Yes
2023-01-13 00:00	YourChannel <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'yrc_lang[Videos]' YourChannel <= 1.2.1	`CVE-2023-0282`	6.4 Medium	István Márton	Yes
2023-01-10 00:00	YourChannel <= 1.2.2 Authenticated (Contributor+) Cross-Site Scripting via Shortcode YourChannel <= 1.2.2	`CVE-2022-4833`	7.4 High	István Márton	Yes

Showing 1–10 of 10 reports

Latestv1.2.9

YourChannel: Everything you want in a YouTube plugin.

Author

plugin.builders

4.6(80)

92/100

Last Updated

2024-08-23 (2y ago)

Active Installs

9,000+

Downloads

467,143

Requires WP

3.5+

Requires PHP

Tested up to

WP 6.6.7

Created

2015-02-19 (12y ago)

Do you create or curate YouTube videos? Now turn your website with YouTube links into an engagement platform. Show your videos and playlists on your own website. Just enter your YouTube username or channel ID, click Check, Save and copy paste the shortcode – doesn’t even take a minute. Live Demo What it displays : All uploaded videos. Playlists (lists videos from that playlist on click). Total videos and views. Single videos. All of above are optional. You can choose what to display. Built-in GDPR overlay PRO version can display : Videos from a playlist. Videos from a search term. Comments. Custom playlists (by entering video ids). And more Features : Easy visual builder with live preview which generates shortcode that looks like [yourchannel user="user"]. Play video in Lightbox or Inline. 7 video thumb styles. RTL support. Beautifully responsive. Font icons. Feature suggestions are implemented quickly. Smooooth transitions. Shortcode works in page, posts or custom fields. Loads files only if shortcode is present. Quick translation form for UI terms (Videos, Playlists, Loading… etc.). Translation ready. Autoplay option. Easy shortcode instructions in post editor. Cache system for fast loading. Much more features are available in PRO version Don’t let visitors leave your site for YouTube. Demo Support : We’ll respond to your issue within 2-18 hours. Write to us at support [at] plugin.builders. Please also include a link to your page with YourChannel shortcode if it’s online. Note : This plugin cannot list unlisted / private videos/playlists.

View on WordPress.org