We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-1631

CVE-2026-1631

WordPress

Severity: MEDIUM
CVSS: 5.4CVSS
Published: 2026-05-18
Last modified: 2026-05-18
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CWE: CWE-862

Description

The Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4 is vulnerable to unauthorized modification of the Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4's license key due to a missing capability check on the 'actions' function. This makes it possible for subscribers and above delete the license key.

References

https://wpscan.com/vulnerability/b19596c2-69bc-4e15-8632-eb80f4577e3c/

Summary

Description

References