Target Video Easy Publish

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Target Video Easy Publish

Information

Software Type Plugin
Software Slug brid-video-easy-publish (view on wordpress.org)
Software Status Active
Software Author nebojsadabic
Software Website target-video.com
Software Downloads 46,089
Software Active Installs 60
Software Record Last Updated September 8, 2026

5 Vulnerabilities

Submit a Vulnerability
Target Video Easy Publish <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter
6.4
CVE-2025-8072
Jan 27, 2026
Researcher: Peter Thaleikis
Target Video Easy Publish <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
6.4
CVE-2025-5237
Jun 17, 2025
Researcher: Peter Thaleikis
Target Video Easy Publish <= 3.8.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
5.4
CVE-2025-32688
Apr 17, 2025
Researcher: Phan Trong Quan
Target Video Easy Publish <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode
6.4
CVE-2024-13561
Jan 28, 2025
Researcher: SOPROBRO
Target Video Easy Publish <= 3.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2024-12076
Jan 24, 2025
Researcher: vgo0
Title Status CVE ID CVSS Researchers Date
Target Video Easy Publish <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter Patched CVE-2025-8072 6.4 Peter Thaleikis January 27, 2026
Target Video Easy Publish <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter Patched CVE-2025-5237 6.4 Peter Thaleikis June 17, 2025
Target Video Easy Publish <= 3.8.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution Unpatched CVE-2025-32688 5.4 Phan Trong Quan April 17, 2025
Target Video Easy Publish <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode Patched CVE-2024-13561 6.4 SOPROBRO January 28, 2025
Target Video Easy Publish <= 3.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting Patched CVE-2024-12076 6.1 vgo0 January 24, 2025

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation