plugin

Youtubefreedown Vulnerabilities

1 known security issue reported for the Youtubefreedown WordPress plugin. Most recent disclosed May 25, 2014.

1 critical

Running Youtubefreedown on your site? Check whether your installed version is affected.

Youtube Freedown <= 1.0 - Remote Media File Inclusion

critical

The Youtube Freedown plugin for WordPress is vulnerable to Remote Media File Inclusion in versions up to, and including, 1.0 via the player.swf file. This allows unauthenticated attackers to include remote files on the server.

CVSS:: 9.8
Affected:: up to 1.0
Fix:: No patched version reported
Disclosed:: May 25, 2014

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database