Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch
Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; 4 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.5 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Missing Authorization, SQL Injection.
4 of the records (80%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.
4 independent researchers contributed these findings, one record each. Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-27422YT Player – Embed and Customize Video Players <= 2.0.9 - Missing Authorization
Read the full analysisVulnerability Records

Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch
Author
bPlugins
YT Player | Documentation | Pricing | Support | Demo YT Player is a modern, lightweight, and fully customizable YouTube video player built for WordPress. Whether you’re adding a single video or creating a video-rich experience across posts, pages, or widget areas, this plugin makes it easy to embed YouTube videos with a sleek, accessible interface powered by HTML5 and the Plyr framework. Use a simple shortcode to embed YouTube videos without needing iframe codes. Ideal for bloggers, marketers, educators, and anyone looking to add YouTube video to WordPress effortlessly. Key Features – Free Version Gutenberg Block Support – Includes a dedicated ‘Video Player for YouTube’ Gutenberg block for seamless block editor page building. Easy YouTube Embed with Shortcode – Paste your YouTube URL inside [ytp]…[/ytp] or use [ytplayer id=”…”] anywhere — posts, pages, sidebars, or custom templates. Works with YouTube Video ID or URL – Add either the full YouTube video link or just the 11-character video ID. Fully Responsive Layout – Player adjusts automatically to fit desktop, tablet, and mobile screens seamlessly. Fullscreen & Keyboard Navigation – Viewers can switch to full-screen mode and navigate easily using keyboard shortcuts. Fast & Lightweight – Built with modern HTML5 standard and Plyr framework for optimal page loading performance. Control Customization – Choose which controls to show or hide for basic playback. YT Player Pro – Unlock Premium Features The Pro version offers advanced control over video playback, branding, and layout: Auto Play & Muted Playback – Automatically start video playback when page loads, with option to start muted by default. Add a Brand Logo on Videos – Display your custom logo as an overlay on videos with adjustable position, size, and transparency. Upload Custom Banner Thumbnails – Replace default YouTube video previews with your own custom branded cover image. Floating Mini Player While Scrolling – Keep the video playing in a sleek floating corner window as visitors scroll down the page. Custom Seek Time Interval – Set custom seek time jump intervals (in seconds) for forward and rewind buttons. Hide Controls on Pause – Keep the player ultra-clean by hiding control bars when the video is paused. Hide YouTube UI & Branding – Hide native YouTube interface elements and branding for a distraction-free experience. Create & Save Custom Presets – Save customized player designs and options as presets for instant one-click reuse across your site. Try the Pro Version – Unlock all premium features today! How to Use YT Player – Quick Start Guide Getting started is easy! Live Demo | Try the Pro This plugin is ideal for Video bloggers and vloggers Online courses and educators Marketing landing pages Portfolio sites News & magazine layouts Anyone who wants a custom YouTube embed player Check out our other WordPress Plugins HTML5 Audio Player – Best audio player plugin for WordPress. PDF Poster – A fully-featured PDF Viewer Plugin for WordPress. StreamCast – A fully-featured Radio Player Plugin for WordPress. 3D Viewer – Display interactive 3D models on the webs. Source Code You can find the source code, report bugs, and contribute to the development of this plugin on our GitHub repository: YT Player on GitHub Third-Party Libraries This plugin bundles the following third-party JavaScript/PHP libraries. Codestar Framework Source: http://codestarframework.com/ GitHub: https://github.com/Codestar/codestar-framework License: GPLv2 or later – https://github.com/Codestar/codestar-framework/blob/master/LICENSE.md Purpose: Provides the options framework for the plugin’s settings and shortcode generator. Freemius SDK Source: https://freemius.com/ GitHub: https://github.com/Freemius/wordpress-sdk License: GPLv3 – https://github.com/Freemius/wordpress-sdk/blob/master/LICENSE.txt Purpose: Provides opt-in usage tracking and analytics to help improve the plugin. bpl-tools Source / GitHub: https://github.com/bPlugins/bpl-tools License: GPL-2.0-or-later – https://www.gnu.org/licenses/gpl-2.0.html Purpose: Shared utility library providing admin dashboard components and common Gutenberg editor controls. External Services: The library may connect to bPlugins, WordPress.org, and Freemius services for product data and checkout functionality. See full details: https://github.com/bPlugins/bpl-tools#external-requests–why-they-are-made
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C