Conversation
supportJust got a notice that 5.31 of this plugin has an XSS cross scripting error. We need a fix. See link: https://patchstack.com/database/wordpress/plugin/youtube-embed/vulnerability/wordpress-youtube-embed-5-3-1-cross-site-scripting-xss-vulnerability?_a_id=431
Given it doesn’t seem like we’ll get a fix, as the plugin is effectively abandoned, I’ve gone through the rather painful process of backing the plugin out of what I do. Which is annoying as I’ve used this for over a decade. Loved when Artiss had control – this would have been fixed in a day. Now it seems like it’s never gonna be updated again. I went through all six websites I used this plugin and one by one by one edited them all to remove the use of the plugin and gone back to native Youtube streaming. Was a big pain in the ass (as it was over 600 individual pages and posts), but I couldn’t have a cross scripting hole live on six different websites. Thought about another plugin, but if I was gonna have to edit every post to change to their trigger, I might as well just go back to native. Fare ye well, plugin – I was a big supporter, then it was sold and a shame the new owners don’t give a crap (given how long it’s been since any update of any kind? – yeah it’s abandonded). This reply was modified 1 year, 1 month ago by Joe Siegler . Reason: Forgot to add number of pages/posts
Given it doesn’t seem like we’ll get a fix, as the plugin is effectively abandoned, I’ve gone through the rather painful process of backing the plugin out of what I do. Which is annoying as I’ve used this for over a decade. Loved when Artiss had control – this would have been fixed in a day. Now it seems like it’s never gonna be updated again. I went through all six websites I used this plugin and one by one by one edited them all to remove the use of the plugin and gone back to native Youtube streaming. Was a big pain in the ass (as it was over 600 individual pages and posts), but I couldn’t have a cross scripting hole live on six different websites. Thought about another plugin, but if I was gonna have to edit every post to change to their trigger, I might as well just go back to native. Fare ye well, plugin – I was a big supporter, then it was sold and a shame the new owners don’t give a crap (given how long it’s been since any update of any kind? – yeah it’s abandonded). This reply was modified 1 year, 1 month ago by Joe Siegler . Reason: Forgot to add number of pages/posts