MediumCVSS 6.5
EPSS 0.52%
CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the plugin