PLUGIN SECURITY
Is Youtube Channel safe?
Show video thumbnails or playable video block of recent YouTube Playlist, Channel (User Uploads) videos.
What this plugin does
- Slug:
youtube-channel - Author: Aleksandar Urošević
- 5000+ active installs
- 88/100 rating (39 reviews on wordpress.org)
- 479081 all-time downloads
- On WordPress.org since 2011-03-29
channelplaylistvideowidgetyoutube
Maintenance status
- Latest known version: 3.25.2
- Last updated: 2025-02-08 9:35am GMT
- Tested up to WordPress: 6.7.7
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
4 known CVEs on file for Youtube Channel. Reported between 2023 and 2023.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2023-25987 | My YouTube Channel [youtube-channel] < 3.23.4 (closed) | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 3.23.4 | 3.23.4 | 2023-02-23 | ✓ fixed in latest |
| CVE-2022-4756 | My YouTube Channel [youtube-channel] < 3.23.0 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 3.23.0 | 3.23.0 | 2023-01-11 | ✓ fixed in latest |
| — | My YouTube Channel [youtube-channel] < 3.23.0 (closed) | — | Unknown | < 3.23.0 | 3.23.0 | 2023-01-06 | ✓ fixed in latest |
| CVE-2023-0446 | My YouTube Channel [youtube-channel] < 3.23.0 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.5 | < 3.23.0 | 3.23.0 | 2023-01-04 | ✓ fixed in latest |
| CVE-2023-0447 | My YouTube Channel [youtube-channel] < 3.23.0 (closed) | Missing Authorization | Medium 4.3 | < 3.23.0 | 3.23.0 | 2023-01-04 | ✓ fixed in latest |
| CVE-2023-0446 | My YouTube Channel < 3.23.0 - Admin+ Stored XSS | — | Unknown | < 3.23.0 | 3.23.0 | — | ✓ fixed in latest |
How to fix it
Keep Youtube Channel updated — 3.25.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- WP Telegram (Auto Post and Notifications) — 30000+ active installs — 100/100 (426) — max PHP <8.0
- Seriously Simple Podcasting — 30000+ active installs — 94/100 (329) — max PHP 8.4
- Cue by AudioTheme.com — 6000+ active installs — 94/100 (36) — max PHP 8.4
- WP Telegram Widget and Join Link — 4000+ active installs — 98/100 (31) — max PHP 8.4
- Audio Album — 4000+ active installs — 100/100 (12)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.