PT-2025-7730

CVE-2025-27298

Published

2025-02-24

Updated

2025-03-03

CVSS 3.1

8.3

High

MetricsAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP Video Posts versions 3.5.1 and earlier

Description A Cross-Site Request Forgery (CSRF) issue in WP Video Posts allows for OS Command Injection.

Recommendations For WP Video Posts versions 3.5.1 and earlier, update to a version that contains a fix for this issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾