CyberRota Analysis
AI-GeneratedThe Video Player for YouTube WordPress plugin prior to version 2.1.0 is vulnerable to SQL injection due to inadequate sanitization and escaping of user-supplied input in SQL statements. This vulnerability allows users with Contributor roles and higher to execute malicious queries, potentially exposing sensitive database information. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of data breaches.
Original NVD Description
The Video Player for YouTube WordPress plugin before 2.1.0 does not properly sanitise and escape user-supplied input before using it in a SQL statement, allowing users with the Contributor role and above to perform SQL injection attacks and read arbitrary data from the database.