CVE-2026-85007 | Video Player for YouTube Plugin up to 2.1.3 on WordPress Player-Preset AJAX access control

October 29, 2026 Yanac

A vulnerability was found in Video Player for YouTube Plugin up to 2.1.3 on WordPress. It has been rated as critical. This affects an unknown part of the component Player-Preset AJAX Handler. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2026-85007. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More