Security Advisory

CVE-2026-1631

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-18 06:00:04

Last updated 2026-05-18 13:39:28

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4 is vulnerable to unauthorized modification of the Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4's license key due to a missing capability check on the 'actions' function. This makes it possible for subscribers and above delete the license key.

← Browse all CVEs View on cve.org ↗