CVE-2025-0955

Name of the Vulnerable Software and Affected Versions: VidoRev Extensions plugin for WordPress versions up to, and including, 2.9.9.9.9.9.5

Description: The issue is related to unauthorized access due to a missing capability check on the 'vidorev import single video' AJAX action. This allows unauthenticated attackers to import arbitrary YouTube videos.

Recommendations: For versions up to, and including, 2.9.9.9.9.5, consider disabling the 'vidorev import single video' AJAX action until a patch is available to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.