Feeds for YouTube (YouTube video, channel, and gallery plugin), CVE-2025-64635

CVE, Research URL: CVE-2025-64635
Home page URL: Security reports for Feeds for YouTube (YouTube video, channel, and gallery plugin)
Application: Feeds for YouTube (YouTube video, channel, and gallery plugin)
Published on: Dec 16, 2025
Research Description: Missing Authorization vulnerability in Syed Balkhi Feeds for YouTube feeds-for-youtube allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Feeds for YouTube: from n/a through <= 2.4.0.
Affected versions: max 2.4.0.
Status: vulnerable