Embedplus Youtube vulnerabilities

• embedplus youtube embed plus WordPress Youtube Embed Plus plugin <= 14.2.4 - Broken Access Control vulnerability CVE-2026-39485 4.3 MediumApril 8, 2026
• embedplus youtube CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting... CVE-2017-1000224 6.5 MediumNovember 17, 2017