Video Share VOD – Turnkey Video Site Builder Script Security & Risk Analysis

The video-share-vod plugin v3.1.1 presents a mixed security posture. While it demonstrates good practices with a high percentage of SQL prepared statements and properly escaped outputs, significant concerns arise from its attack surface and historical vulnerability patterns. A substantial number of AJAX handlers (9 out of 10) lack authentication checks, creating potential entry points for unauthorized actions. The taint analysis reveals two high-severity flows with unsanitized paths, which could lead to serious security issues if exploited. The plugin's history of five known CVEs, including a high-severity one, and the recent vulnerability dating to 2026, suggest a recurring pattern of exploitable weaknesses. Although there are currently no unpatched vulnerabilities, the plugin's track record and the identified code-level risks indicate a need for caution and diligent security management.