plugin

Audiotube Vulnerabilities

2 known security issues reported for the Audiotube WordPress plugin. Most recent disclosed Nov 21, 2025.

1 medium

Running Audiotube on your site? Check whether your installed version is affected.

Scan your site free

AudioTube [audiotube] <= 0.0.3 (unfixed)

unknown

[en] The AudioTube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' shortcode attribute of the 'audiotube' shortcode in all versions up to, and including, 0.0.3. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

Affected:
up to 0.0.3
Fix:
No patched version reported
Disclosed:
Nov 21, 2025

CVE-2025-11801 on NVD →

AudioTube <= 0.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

medium

The AudioTube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' shortcode attribute of the 'audiotube' shortcode in all versions up to, and including, 0.0.3. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with con...

CVSS:
6.4
Affected:
up to 0.0.3
Fix:
No patched version reported
Disclosed:
Nov 20, 2025

CVE-2025-11801 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database