VendorsMDC YouTube Downloader Projectmdc_youtube_downloaderall versions
Vulnerabilities

MDC YouTube Downloader Project MDC YouTube Downloader

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2015-5469
Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php.
Published 2017-05-23 · Modified
7.5EPSS 0.101
CVE-2025-23639
WordPress MDC YouTube Downloader plugin <= 3.0.0 - CSRF to Stored XSS vulnerability
Published 2025-01-16 · Modified
7.1EPSS 0.002
CVE-2024-51875
WordPress MDC YouTube Downloader plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability
Published 2024-11-19 · Modified
6.5EPSS 0.003