plugin

Youtube Feed Pro Vulnerabilities

1 known security issue reported for the Youtube Feed Pro WordPress plugin. Most recent disclosed Jan 16, 2026.

1 medium

Running Youtube Feed Pro on your site? Check whether your installed version is affected.

Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversal

medium

The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.6.0 via the 'sby_check_wp_submit' AJAX action. This is due to insufficient sanitization of user-supplied data and the use of that data in a file operation. This makes it possible for unauthenticat...

CVSS:: 5.9
Affected:: up to 2.6.0
Fixed in:: 2.6.1
Disclosed:: Jan 16, 2026

CVE-2025-12002 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database