Known vulnerabilities in the Video List Manager plugin
5 security advisories have been published for the Video List Manager plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Video List Manager - SQL Injection (CVE-2025-52831) CRITICAL
- Video List Manager - Cross-Site Scripting (XSS) (CVE-2025-52776) HIGH
- Video List Manager - SQL Injection (CVE-2025-52821) HIGH
- Video List Manager - Broken Access Control (CVE-2025-49986) MEDIUM
- Video List Manager - SQL Injection (CVE-2023-1408) HIGH