Stored Cross-Site Scripting Vulnerability in Target Video Easy Publish Plugin for WordPress

CVE-2025-8072

What is CVE-2025-8072?

The Target Video Easy Publish plugin for WordPress is susceptible to a stored cross-site scripting vulnerability via the 'placeholder_img' parameter. This flaw is present in all versions up to and including 3.8.8 and arises from inadequate input sanitization and output escaping mechanisms. Authenticated users with Contributor-level permissions or higher can exploit this vulnerability to inject malicious web scripts. The injected scripts are executed in the context of the user who accesses the affected pages, potentially compromising user data and website integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References