WPdevart YouTube Embed, Playlist and Popup by WpDevArt

• CVE-2025-2537 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library 0.3%
• CVE-2023-24002 Medium 5.9 WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS) 0.4%