Open Redirect Vulnerability in WP YouTube Lyte by Frank Goossens

CVE-2025-66062

What is CVE-2025-66062?

The WP YouTube Lyte plugin by Frank Goossens contains an open redirect vulnerability that allows attackers to redirect users to untrusted sites. This flaw can be exploited to create phishing attacks, compromising user information and potentially leading to unauthorized access. Affected versions include all prior to and including 1.7.28. Users are encouraged to update to the latest version to mitigate this security risk.

References