CVE-2022-1187

MEDIUM 6.1CVE-2022-1187 · Published 19/04/2022 · updated 17/06/2026

In short

CVE-2022-1187 is a MEDIUM (CVSS 6.1) vulnerability affecting wp youtube live (andrewrminion).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.7% of all vulnerabilities.
Fix: update to 1.7.22 or later.

Package	Affected versions	Patched versions
wp youtube live andrewrminion	`< 1.7.22`	`1.7.22`

Description

The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data found in the ~/inc/admin.php file which allows unauthenticated attackers to inject arbitrary web scripts in versions up to, and including, 1.7.21.

References

macbookandrew/wp-youtube-live commit 2d8ccb7 · Patch
plugins.trac.wordpress.org/browser/wp-youtube-live/trunk/inc/admin.php · Product
wordfence.com/threat-intel/vulnerabilities/id/2d540b53-5c39-43d5-a055-cc5eccfa65b8 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free