CVE-2026-66637

Featured Video Plus versions up to 2.3.3 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk, as it could lead to unauthorized actions or data exposure for users interacting with the affected application. Organizations using this plugin should prioritize patching or upgrading to mitigate potential exploitation.