[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftpZkXW0V168ez1YZ_S67aDhke0gaSgJ-ELhlbeT2noM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":65,"crawl_stats":38,"alternatives":71,"analysis":161,"fingerprints":408},"wp-youtube-lyte","WP YouTube Lyte","1.7.30","Frank Goossens","https:\u002F\u002Fprofiles.wordpress.org\u002Ffuttta\u002F","\u003Cp>WP YouTube Lyte allows you to “lazy load” your video’s, by inserting responsive “Lite YouTube Embeds”. These look and feel like normal embedded YouTube, but only call the “fat” YouTube-player when clicked on, thereby \u003Ca href=\"http:\u002F\u002Fblog.futtta.be\u002F2012\u002F04\u002F03\u002Fspeed-matters-re-evaluating-wp-youtube-lytes-performance\u002F\" rel=\"nofollow ugc\">reducing download size & rendering time substantially\u003C\u002Fa> when embedding YouTube occasionally and improving page performance dramatically when you’ve got multiple YouTube video’s on one and the same page. The plugin can be configured to cache YouTube thumbnails locally, improving both performance and privacy. As such LYTE embedded YouTube videos do not require requests to the YouTube servers, probably (I am not a lawyer) allowing for better GDPR-compliance.\u003C\u002Fp>\n\u003Cp>The plugin picks up on normal YouTube links, taking over from WordPress core’s oEmbed. Alternatively you can add a YouTube-link for a video or \u003Ca href=\"http:\u002F\u002Fblog.futtta.be\u002F2011\u002F10\u002F11\u002Fwp-youtube-lyte-support-for-playlists-almost-included\u002F\" rel=\"nofollow ugc\">an entire playlist\u003C\u002Fa> with “httpv” instead of “http(s)” or add a Lyte widget to your sidebar and WP YouTube Lyte replaces that link with the correct performance-optimized code. Some examples:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>httpv:\u002F\u002Fwww.youtube.com\u002Fwatch?v=_SQkWbRublY (normal video embed)\u003C\u002Fli>\n\u003Cli>httpv:\u002F\u002Fyoutu.be\u002F_SQkWbRublY (video embed with youtube-shortlink)\u003C\u002Fli>\n\u003Cli>httpa:\u002F\u002Fwww.youtube.com\u002Fwatch?v=_SQkWbRublY (audio only embed)\u003C\u002Fli>\n\u003Cli>httpv:\u002F\u002Fwww.youtube.com\u002Fplaylist?list=PLA486E741B25F8E00 (playlist embed)\u003C\u002Fli>\n\u003Cli>httpv:\u002F\u002Fwww.youtube.com\u002Fwatch?v=_SQkWbRublY#stepSize=-1 (video player, one size smaller than what’s configured as default)\u003C\u002Fli>\n\u003Cli>httpv:\u002F\u002Fwww.youtube.com\u002Fwatch?v=_SQkWbRublY?start=20&showinfo=0 (video player, start playing at 20 seconds and don’t show title)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Or using shortcodes:\u003C\u002Fp>\n\u003Cpre>\u003Ccode> [lyte id='_SQkWbRublY' \u002F]\n [lyte id='_SQkWbRublY' audio='true' \u002F]\n [lyte id='A486E741B25F8E00' playlist='true' \u002F]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>WP YouTube Lyte has been written with optimal performance as primary goal, but has been tested for maximum browser-compatibility (iPad included) while keeping an eye on accessibility. Starting with version 1.2.0 lyte embeds are fully responsive and can automatically embed \u003Ca href=\"http:\u002F\u002Fsupport.google.com\u002Fwebmasters\u002Fbin\u002Fanswer.py?hl=en&answer=2413309\" rel=\"nofollow ugc\">videoObject microdata\u003C\u002Fa> as well. The plugin is fully multi-language, with support for Catalan, Dutch, English, French, German, Hebrew, Romanian, Spanish and Slovene.\u003C\u002Fp>\n\u003Cp>Feedback is welcome; see \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwp-youtube-lyte\u002Ffaq\u002F\" rel=\"ugc\">info in the faq\u003C\u002Fa> for bug reports\u002F feature requests and feel free to \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwp-youtube-lyte\u002F\" rel=\"ugc\">rate and\u002For report on compatibility on wordpress.org\u003C\u002Fa>.\u003C\u002Fp>\n","High performance YouTube video, playlist and audio-only embeds which don't slow down your blog and offer optimal accessibility.",30000,985811,96,206,"2026-03-14T15:08:00.000Z","7.0","6.0","",[20,21,22,23,24],"gdpr","lazy-load","performance","video","youtube","http:\u002F\u002Fblog.futtta.be\u002Fwp-youtube-lyte\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-youtube-lyte.1.7.30.zip",98,2,0,"2025-11-14 00:00:00","2026-03-15T15:16:48.613Z",[33,49],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2025-66062","youtube-lyte-open-redirect","YouTube Lyte \u003C= 1.7.28 - Open Redirect","The WP YouTube Lyte plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.7.28. This is due to insufficient validation on a redirect url supplied. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.",null,"\u003C=1.7.28","1.7.29","medium",4.7,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:L\u002FA:N","URL Redirection to Untrusted Site ('Open Redirect')","2025-11-25 15:39:08",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fdaf8e0ca-abe7-4243-8921-ff5a6f88cfcf?source=api-prod",12,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":56,"cvss_score":57,"cvss_vector":58,"vuln_type":59,"published_date":60,"updated_date":61,"references":62,"days_to_patch":64},"CVE-2021-24419","wp-youtube-lyte-authenticated-admin-cross-site-scripting","WP YouTube Lyte \u003C= 1.7.15 - Authenticated (Admin+) Cross-Site Scripting","The WP YouTube Lyte WordPress plugin before 1.7.16 did not sanitise or escape its lyte_yt_api_key and lyte_notification settings before outputting them back in the page, allowing high privilege users to set XSS payload on them and leading to stored Cross-Site Scripting issues.","\u003C1.7.16","1.7.16","low",3.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2021-05-03 00:00:00","2024-01-22 19:56:02",[63],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F28d3fe13-20f8-48af-9476-98d2bef467e5?source=api-prod",995,{"slug":66,"display_name":7,"profile_url":8,"plugin_count":67,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":68,"trust_score":69,"computed_at":70},"futtta",1,504,78,"2026-04-04T04:23:52.676Z",[72,93,107,128,143],{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":80,"downloaded":81,"rating":82,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":87,"tags":88,"homepage":91,"download_link":92,"security_score":82,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"yep-youtube-embed","YEP: Optimize YouTube Embeds","1.1.2","Webamator","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebamator\u002F","\u003Cp>YouTube iframe embeds often load many unnecessary resources, which slows down your page. YEP: Optimize YouTube Embeds is a lightweight WordPress plugin that replaces YouTube iframes with a clickable preview image.\u003Cbr \u002F>\nThe actual video loads only when the user clicks the play button, improving page load times and reducing initial page size.\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin uses the external YouTube thumbnail service (https:\u002F\u002Fi.ytimg.com) to display preview images of YouTube videos.\u003Cbr \u002F>\nWhen a page with a YouTube embed is loaded, the plugin requests the thumbnail image directly from YouTube servers.\u003Cbr \u002F>\nNo personal data is sent from your site to YouTube, only the video ID (already public in the YouTube URL).\u003C\u002Fp>\n\u003Cp>Privacy Policy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003Cbr \u002F>\nTerms of Service: https:\u002F\u002Fwww.youtube.com\u002Ft\u002Fterms\u003C\u002Fp>\n","Short Description: Load YouTube videos faster by replacing iframes with a preview image; the video plays only when clicked play.",300,2248,100,6,"2025-09-20T16:32:00.000Z","6.8.5","5.2","7.4",[21,89,22,23,90],"optimize","youtube-embed","https:\u002F\u002Fwww.helper-wp.com\u002Fplugins\u002Fyoutube-embed-plugin-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyep-youtube-embed.1.1.2.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":29,"downloaded":101,"rating":82,"num_ratings":28,"last_updated":102,"tested_up_to":103,"requires_at_least":104,"requires_php":87,"tags":105,"homepage":18,"download_link":106,"security_score":82,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"dblocks-youtube-lazyload","Lazy Load for YouTube – GDPR Friendly YouTube Embed Block by DBlocks","1.3.1","DPlugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fdplugins\u002F","\u003Cp>\u003Cstrong>The GDPR friendly way to embed YouTube videos in WordPress.\u003C\u002Fstrong> This block replaces heavy YouTube iframes with a lightweight placeholder image and only loads the YouTube player when your visitor clicks play.\u003C\u002Fp>\n\u003Cp>No YouTube scripts or cookies are loaded until the user interacts — making your site faster and privacy compliant.\u003C\u002Fp>\n\u003Ch3>Key Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>GDPR & Privacy Friendly\u003C\u002Fstrong>: Zero YouTube scripts loaded until the user clicks play\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Faster Page Speed\u003C\u002Fstrong>: Replaces heavy YouTube embeds with a lightweight image placeholder\u003C\u002Fli>\n\u003Cli>\u003Cstrong>6 Play Button Styles\u003C\u002Fstrong>: Choose from 6 icon presets and apply them globally\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Play Icon\u003C\u002Fstrong>: Upload your own SVG play icon\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Theme Color Support\u003C\u002Fstrong>: Use your WordPress theme colors on the play button\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Adjustable Icon Size\u003C\u002Fstrong>: Control the size of the play button\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Thumbnail Quality\u003C\u002Fstrong>: Choose the YouTube thumbnail quality per block\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Thumbnail\u003C\u002Fstrong>: Upload your own thumbnail image for extra privacy\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Global Settings\u003C\u002Fstrong>: Set icon style, colors, and size once — applies across your entire site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Free\u003C\u002Fstrong>: No premium upsells or locked features\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Third-Party Services\u003C\u002Fh3>\n\u003Cp>This plugin integrates with YouTube’s services in the following ways:\u003Cbr \u002F>\n– Fetches video thumbnail images from YouTube servers when displaying video previews\u003Cbr \u002F>\n– Loads the YouTube video player and related scripts when a user clicks to play a video\u003Cbr \u002F>\n– Communicates with YouTube’s servers to stream video content\u003C\u002Fp>\n\u003Cp>For more information about YouTube’s services:\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\" rel=\"nofollow ugc\">YouTube Service Homepage\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Ft\u002Fterms\" rel=\"nofollow ugc\">YouTube Terms of Service\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fpolicies.google.com\u002Fprivacy\" rel=\"nofollow ugc\">Google Privacy Policy\u003C\u002Fa> (YouTube is owned by Google)\u003C\u002Fp>\n\u003Ch3>Embeds\u003C\u002Fh3>\n\u003Cp>For more information about embeds:\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDBlocks-by-DPlugins\u002Fdblocks-lazyload-for-youtube\u002Fblob\u002Fmain\u002Fembeds.md\" rel=\"nofollow ugc\">Embed guide\u003C\u002Fa>\u003C\u002Fp>\n","GDPR friendly lazy load YouTube block that only loads the video player when visitors click play. Boost page speed by replacing heavy YouTube embeds wi …",2054,"2026-02-26T13:50:00.000Z","6.9.4","6.5.2",[20,21,23,24,90],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdblocks-youtube-lazyload.1.3.1.zip",{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":115,"downloaded":116,"rating":117,"num_ratings":118,"last_updated":119,"tested_up_to":85,"requires_at_least":120,"requires_php":121,"tags":122,"homepage":125,"download_link":126,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":127,"fetched_at":31},"lazy-load-for-videos","Lazy Load for Videos","2.18.9","kevinweber","https:\u002F\u002Fprofiles.wordpress.org\u002Fkevinweber\u002F","\u003Cp>This plugin improves page load time and increases your Google PageSpeed Score. It works with oEmbed and replaces embedded Youtube and Vimeo videos with a clickable preview image.\u003Cbr \u002F>\nBy loading videos only when the user clicks on the preview image, no unnecessary JavaScript is loaded. Especially on sites with many embedded videos this will make your visitors happy. Additionally, all Youtube videos are loaded in a privacy-enhanced mode using the “https:\u002F\u002Fwww.youtube-nocookie.com” embed URL.\u003C\u002Fp>\n\u003Cp>This plugin works for your existing YouTube and Vimeo blocks. No vendor lock-in and no custom shortcodes: Easily turn the plugin on and off anytime.\u003C\u002Fp>\n\u003Cp>Plugin review with speed test results \u003Ca href=\"https:\u002F\u002Fwptavern.com\u002Fspeed-up-wordpress-with-lazy-load-for-videos\" rel=\"nofollow ugc\">on WP Tavern\u003C\u002Fa>.\u003Cbr \u002F>\nDevelopers can contribute \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fkevinweber\u002Flazy-load-for-videos\" rel=\"nofollow ugc\">on Github\u003C\u002Fa>.\u003Cbr \u002F>\nMore about the author: \u003Ca href=\"https:\u002F\u002Fwww.kweber.com\" rel=\"nofollow ugc\">on kweber.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Some additional features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Display video titles on preview images\u003C\u002Fli>\n\u003Cli>Display privacy disclaimer on top of preview images (e.g. for GDPR compliance)\u003C\u002Fli>\n\u003Cli>Pre-roll and post-roll advertisements: Convert all videos into a playlist and automatically add your corporate video, product teaser or another video advertisement to every video. (Great for branding and video ads!)\u003C\u002Fli>\n\u003Cli>Hide annotations such as “subscribe to channel” to avoid distractions\u003C\u002Fli>\n\u003Cli>Add custom CSS via the plugin’s admin panel\u003C\u002Fli>\n\u003Cli>Choose custom colour for your Vimeo player\u003C\u002Fli>\n\u003Cli>Hide controls from Youtube player\u003C\u002Fli>\n\u003Cli>Hide information like the video title and uploader when the video starts playing\u003C\u002Fli>\n\u003Cli>Even lazy load videos in text widgets (Youtube only)\u003C\u002Fli>\n\u003Cli>Choose between thumbnail sizes (standard or cover)\u003C\u002Fli>\n\u003Cli>Choose from several play button styles\u003C\u002Fli>\n\u003Cli>Choose the traditional red or the alternative white progress bar for the Youtube video player\u003C\u002Fli>\n\u003Cli>Don’t show related videos at the end of your videos\u003C\u002Fli>\n\u003Cli>Works with WordPress Multisite and many plugins such as TablePress\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Future features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Set a custom preview image per video\u003C\u002Fli>\n\u003Cli>Track how often the videos have been loaded with Google Analytics\u003C\u002Fli>\n\u003Cli>… YOU want a new feature RIGHT NOW? Please implement it yourself and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fkevinweber\u002Flazy-load-for-videos\" rel=\"nofollow ugc\">contribute on Github\u003C\u002Fa>, and I’ll publish your enhancements to the official WordPress directory.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Translators\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Serbian (sr_RS) – \u003Ca href=\"\u002F\u002Ffirstsiteguide.com\u002F\" rel=\"nofollow ugc\">Ogi Djuraskovic\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Spanish (es_ES) – \u003Ca href=\"http:\u002F\u002Fpo5i.github.io\u002F\" rel=\"nofollow ugc\">Carlos Villavicencio\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you have created your own language pack, or have an update of an existing one, you can \u003Ca href=\"https:\u002F\u002Fwww.kweber.com\u002Fcontact\u002F\" rel=\"nofollow ugc\">send me\u003C\u002Fa> your gettext PO and MO so that I can bundle it into my plugin. You can download the latest POT file \u003Ca href=\"https:\u002F\u002Fplugins.svn.wordpress.org\u002Flazy-load-for-videos\u002Ftrunk\u002Flanguages\u002Flazy-load-for-videos.pot\" rel=\"nofollow ugc\">from here\u003C\u002Fa>.\u003C\u002Fp>\n","Boost page speed by replacing embedded YouTube and Vimeo videos with a clickable preview image. Video scripts only load on click.",10000,447036,88,105,"2025-08-23T09:05:00.000Z","5.6","7.2",[21,22,123,124,24],"privacy","vimeo","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Flazy-load-for-videos\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flazy-load-for-videos.2.18.9.zip","2025-08-26 12:22:01",{"slug":129,"name":130,"version":131,"author":132,"author_profile":133,"description":134,"short_description":135,"active_installs":80,"downloaded":136,"rating":82,"num_ratings":137,"last_updated":138,"tested_up_to":103,"requires_at_least":139,"requires_php":120,"tags":140,"homepage":141,"download_link":142,"security_score":82,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"simple-lazy-load-videos","Simple Lazy Load Videos","1.7.2","Valerii Bohdanov","https:\u002F\u002Fprofiles.wordpress.org\u002Frad_\u002F","\u003Cp>The plugin reduces page load time and increases your Google PageSpeed score.\u003C\u002Fp>\n\u003Cp>It replaces the embedded YouTube and Vimeo videos with a video preview image, third-party CSS & JS are downloaded only after a click.\u003C\u002Fp>\n","Simple Lazy Load for embedded video from YouTube and Vimeo",14213,5,"2026-01-04T19:34:00.000Z","4.9",[22,23,124,24],"https:\u002F\u002Fgithub.com\u002Fradkill\u002Fsimple-lazy-load-videos","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-lazy-load-videos.1.7.2.zip",{"slug":144,"name":145,"version":146,"author":147,"author_profile":148,"description":149,"short_description":150,"active_installs":151,"downloaded":152,"rating":82,"num_ratings":28,"last_updated":153,"tested_up_to":85,"requires_at_least":154,"requires_php":16,"tags":155,"homepage":159,"download_link":160,"security_score":82,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"exovia-youtube-dsgvo","exovia YouTube DSGVO","1.1.0","Team exovia","https:\u002F\u002Fprofiles.wordpress.org\u002Fexovia\u002F","\u003Cp>You want to embed YouTube videos on your website and ensure that the data protection regulations according to GDPR are complied with? Our new plugin offers you a solution for exactly this!\u003C\u002Fp>\n\u003Cp>With our YouTube DSGVO plugin, you can display YouTube videos on your website for free and in compliance with data protection laws. Instead of loading the videos directly, a colored placeholder of your choice is displayed first. By adding your own words, this becomes an attractive interaction area for your visitors.\u003C\u002Fp>\n\u003Cp>Only when your visitors click on one of the consent buttons, a connection to the YouTube server is established and data is transferred to YouTube. Then the desired video is loaded and can be played.\u003C\u002Fp>\n\u003Cp>Both the placeholder and the YouTube video are mobile-optimized and automatically adapt to the display size. You can also assign a maximum width to both elements to achieve the best possible visual result.\u003C\u002Fp>\n\u003Cp>With our plugin, you protect the privacy of your visitors while taking advantage of videos for your website success.\u003C\u002Fp>\n\u003Cp>Want a live demo? Then feel free to visit the following article. There we have integrated a YouTube video of ours with our DSGVO plugin in a data protection compliant manner and go into more detail on the topic of data protection and YouTube: \u003Ca href=\"https:\u002F\u002Fwww.exovia.de\u002Fjournal\u002Fwordpress-youtube-dsgvo-konform\u002F\" rel=\"nofollow ugc\">YouTube DSGVO konform einbinden\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>YOUR 6 EASY TODOS FOR 1 VIDEO\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Install and activate the plugin “exovia YouTube DSGVO”.\u003C\u002Fli>\n\u003Cli>Go to youtube.com, find the video you want to embed in your website and click on it\u003C\u002Fli>\n\u003Cli>Click on share and then on embed\u003C\u002Fli>\n\u003Cli>Embed the copied HTML code into the YouTube Fallback Iframe field in your plugin settings\u003C\u002Fli>\n\u003Cli>Adjust the colors and sizes of “exovia YouTube DSGVO” to match your color scheme, web design and website terms. Simply from your WP backend.\u003C\u002Fli>\n\u003Cli>Use the shortcode: \u003Ccode>[exovia-dsgvo-youtube-video]\u003C\u002Fcode> anywhere on your website where you want your video to appear – e.g. on the blog, on your about page – or even directly on your homepage.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>4 SIMPLE STEPS FOR YOUR 2ND OR 50TH VIDEO\u003C\u002Fstrong>\u003Cbr \u002F>\nExtended Shortcode Example:\u003Cbr \u002F>\n    \u003Ccode>[exovia-dsgvo-youtube-video iframe='\u003Ciframe width=\"560\" height=\"315\" src=\"https:\u002F\u002Fwww.youtube-nocookie.com\u002Fembed\u002FqqobbcK0R-o?start=32\" title=\"YouTube video player\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" allowfullscreen>\u003C\u002Fiframe>' layer_bg_color='#f88379' button_bg_color='#8379f8' layer_bg_image_id=\"11\"]\u003C\u002Fcode>\u003Cbr \u002F>\n1. Copy the extended shortcode above and place it on your website where you want your video to appear.\u003Cbr \u002F>\n1. Go to youtube.com, find the video you want to embed in your website, and click on it.\u003Cbr \u002F>\n1. Click “Share” and then click “Embed.”\u003Cbr \u002F>\n1. Replace the iframe in the extended shortcode you copied before with the new iframe code.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WHAT THE PLUGIN DOES FOR YOU\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Until the user’s consent has been explicitly given, it prevents the connection to YouTube’s servers (GDPR) and thus protects the privacy of your visitors.\u003C\u002Fli>\n\u003Cli>Thanks to an adjustable level, it reserves space for the video until it is loaded, thus stabilizing the design and impact of your website.\u003C\u002Fli>\n\u003Cli>Based on your color and size wishes, it ensures that your placeholder automatically adapts to your layout.\u003C\u002Fli>\n\u003Cli>The extended shortcode makes it possible to embed different videos in a privacy-compliant way and to style them differently or add different text if you wish.\u003C\u002Fli>\n\u003Cli>Whether Classic Editor or Block Editor (Gutenberg): the plugin is compatible with both and makes sure that your settings are accepted and realized.\u003C\u002Fli>\n\u003Cli>It works well with ACF and Carbon Fields\u003C\u002Fli>\n\u003Cli>You have a multilingual site? The plugin works in all languages and can be designed and re-written for specific pages. We will start working on the German translation after approval, and other languages will follow.\u003C\u002Fli>\n\u003Cli>It provides a required link to the YouTube \u002F Google terms of use and\u003C\u002Fli>\n\u003Cli>offers a simple and advanced short code that allows you to use the secure videos anywhere.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>WHAT THE PLUGIN IS NOT FOR\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Handling Videos form different platforms (Sorry. But feel free to let us know if there is interest. If enough people get together we will adapt or write a new plugin).\u003C\u002Fli>\n\u003Cli>Saving users content settings in web databases. Last but not least, this is why the plugin is simple and secure.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Shortcode parameter\u003C\u002Fstrong>\u003Cbr \u002F>\n* title (string)\u003Cbr \u002F>\n* iframe (string from youtube embed)\u003Cbr \u002F>\n* button_title (string)\u003Cbr \u002F>\n* button_title_all (string)\u003Cbr \u002F>\n* layer_text (string)\u003Cbr \u002F>\n* anchor_text (string)\u003Cbr \u002F>\n* layer_bg_image_id (integer — WordPress attachment ID used as placeholder background image)\u003Cbr \u002F>\n* layer_bg_color (css color, hex)\u003Cbr \u002F>\n* button_bg_color (css color, hex)\u003Cbr \u002F>\n* font_color (css color, hex)\u003Cbr \u002F>\n* enable_info_box (true or false)\u003Cbr \u002F>\n* show_load_all_button (true or false)\u003Cbr \u002F>\n* info_box_text (string)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>BUGS & FEEDBACK\u003C\u002Fstrong>\u003Cbr \u002F>\nYour feedback is important to us. If you find mistakes, have wishes, ideas or suggestions, please send us an e-mail to kontakt@exovia.de.\u003C\u002Fp>\n\u003Cp>This plugin was developed with love by our Hamburg-based web design agency exovia.\u003C\u002Fp>\n\u003Cp>Legal notice (German): \u003Ca href=\"https:\u002F\u002Fwww.exovia.de\u002Fimpressum\u002F\" rel=\"nofollow ugc\">www.exovia.de\u002Fimpressum\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You are free to use it on any website across countries to protect the privacy of your users.\u003C\u002Fp>\n\u003Cp>Note: Of course, activating this plugin cannot guarantee that your website is completely compliant with the GDPR. When using Google Analytics or Facebook pixels, for example, other or additional measures must be taken.\u003C\u002Fp>\n\u003Ch3>Development and Build Tools\u003C\u002Fh3>\n\u003Cp>If you want to view the complete source code, including the \u003Ccode>src\u003C\u002Fcode> files, build tools, and test tools, you can do so on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FFritze1602\u002Fexovia-youtube-dsgvo-wordpress-plugin\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>After cloning the repository, you can install the necessary modules by running \u003Ccode>npm install\u003C\u002Fcode> in the base directory. Developers can then use \u003Ccode>npm run dev\u003C\u002Fcode> for development mode and \u003Ccode>npm run build\u003C\u002Fcode> for production builds. The correct proxy can be set in the \u003Ccode>webpack.config.js\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>This provides complete transparency of the functionality and source code, giving developers the opportunity to customize and enhance the plugin.\u003C\u002Fp>\n\u003Cp>We welcome feedback and contributions from the developer community.\u003C\u002Fp>\n\u003Ch3>Privacy and Data Usage\u003C\u002Fh3>\n\u003Cp>This plugin connects to YouTube to embed videos in a GDPR-compliant manner. When a user interacts with the video, a connection to YouTube’s servers (https:\u002F\u002Fwww.youtube-nocookie.com) is established, and data may be transmitted.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Third-Party Service:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Cstrong>YouTube:\u003C\u002Fstrong> This plugin uses YouTube’s no-cookie iframe embed to display the fallback videos. By clicking on the video, users agree to YouTube’s privacy policy and terms of use.\u003Cbr \u002F>\n– \u003Cstrong>No-Cookie Domain for fallback video:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.youtube-nocookie.com\u002Fembed\u002FFQnEL7pqo40\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.youtube-nocookie.com\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Cstrong>Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fpolicies.google.com\u002Fprivacy\" rel=\"nofollow ugc\">YouTube Privacy Policy\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Cstrong>Terms of Service:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fstatic?template=terms\" rel=\"nofollow ugc\">YouTube Terms of Service\u003C\u002Fa>\u003C\u002Fp>\n","exovia YouTube DSGVO enables you to integrate YouTube Videos in a privacy compliant manner that respects the privacy of your visitors.",70,1618,"2025-11-01T15:49:00.000Z","5.8",[156,20,24,157,158],"dsgvo","youtube-plugin","youtube-video","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fexovia-youtube-dsgvo\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexovia-youtube-dsgvo.1.1.0.zip",{"attackSurface":162,"codeSignals":251,"taintFlows":350,"riskAssessment":397,"analyzedAt":407},{"hooks":163,"ajaxHandlers":237,"restRoutes":244,"shortcodes":245,"cronEvents":250,"entryPointCount":28,"unprotectedCount":29},[164,170,175,179,183,187,190,192,195,198,201,206,211,215,218,221,226,230,234],{"type":165,"name":166,"callback":167,"file":168,"line":169},"action","admin_init","lyte_partner_tabs_preinit","lytePartners.php",8,{"type":171,"name":172,"callback":173,"file":168,"line":174},"filter","wp-youtube-lyte_filter_settingsscreen_tabs","lyte_add_partner_tabs",11,{"type":165,"name":176,"callback":177,"file":168,"line":178},"admin_menu","lyte_partners_init",20,{"type":165,"name":176,"callback":180,"file":181,"line":182},"lyte_create_menu","options.php",9,{"type":165,"name":184,"callback":185,"file":181,"line":186},"admin_notices","lyte_cacheclear_ok_notice",15,{"type":165,"name":184,"callback":188,"file":181,"line":189},"lyte_cacheclear_part_notice",17,{"type":165,"name":184,"callback":191,"file":181,"line":178},"lyte_cacheclear_fail_notice",{"type":165,"name":166,"callback":193,"file":181,"line":194},"register_lyte_settings",44,{"type":165,"name":184,"callback":196,"file":181,"line":197},"lyte_admin_nag_apikey",83,{"type":165,"name":184,"callback":199,"file":181,"line":200},"lyte_admin_api_error",97,{"type":165,"name":202,"callback":203,"file":204,"line":205},"widgets_init","lyte_register_widget","widget.php",178,{"type":165,"name":207,"callback":208,"file":209,"line":210},"after_setup_theme","lyte_settings_enforcer","wp-youtube-lyte.php",111,{"type":165,"name":212,"callback":213,"file":209,"line":214},"wp_footer","lyte_init",580,{"type":165,"name":184,"callback":216,"file":209,"line":217},"lyte_thumbcache_moved",727,{"type":165,"name":166,"callback":219,"file":209,"line":220},"lyte_plugin_init",865,{"type":171,"name":222,"callback":223,"priority":224,"file":209,"line":225},"the_content","lyte_prepare",4,867,{"type":171,"name":222,"callback":227,"priority":228,"file":209,"line":229},"lyte_parse",10,868,{"type":171,"name":231,"callback":232,"priority":228,"file":209,"line":233},"get_the_excerpt","lyte_trim_excerpt",871,{"type":165,"name":235,"callback":219,"file":209,"line":236},"init",872,[238],{"action":239,"nopriv":240,"callback":241,"hasNonce":242,"hasCapCheck":240,"file":181,"line":243},"lyte_check_yt_api_key",false,"lyte_check_yt_api_key_callback",true,400,[],[246],{"tag":247,"callback":248,"file":209,"line":249},"lyte","shortcode_lyte",869,[],{"dangerousFunctions":252,"sqlUsage":253,"outputEscaping":255,"fileOperations":174,"externalRequests":224,"nonceChecks":67,"capabilityChecks":67,"bundledLibraries":349},[],{"prepared":29,"raw":29,"locations":254},[],{"escaped":256,"rawEcho":257,"locations":258},60,55,[259,263,265,267,268,270,272,274,276,278,279,280,282,284,286,288,290,292,294,296,298,300,302,304,306,308,309,310,311,312,313,314,315,316,317,318,319,321,322,324,325,326,327,329,331,332,334,336,338,339,341,343,345,346,347],{"file":260,"line":261,"context":262},"lyteCache.php",138,"raw output",{"file":168,"line":264,"context":262},75,{"file":168,"line":266,"context":262},77,{"file":168,"line":82,"context":262},{"file":168,"line":269,"context":262},120,{"file":181,"line":271,"context":262},90,{"file":181,"line":273,"context":262},91,{"file":181,"line":275,"context":262},171,{"file":181,"line":277,"context":262},203,{"file":181,"line":277,"context":262},{"file":181,"line":277,"context":262},{"file":181,"line":281,"context":262},318,{"file":181,"line":283,"context":262},322,{"file":181,"line":285,"context":262},346,{"file":181,"line":287,"context":262},364,{"file":181,"line":289,"context":262},422,{"file":181,"line":291,"context":262},426,{"file":181,"line":293,"context":262},429,{"file":181,"line":295,"context":262},432,{"file":181,"line":297,"context":262},439,{"file":181,"line":299,"context":262},443,{"file":181,"line":301,"context":262},445,{"file":181,"line":303,"context":262},450,{"file":204,"line":305,"context":262},73,{"file":204,"line":307,"context":262},74,{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":264,"context":262},{"file":204,"line":320,"context":262},76,{"file":204,"line":266,"context":262},{"file":204,"line":323,"context":262},134,{"file":204,"line":323,"context":262},{"file":204,"line":323,"context":262},{"file":204,"line":323,"context":262},{"file":204,"line":328,"context":262},135,{"file":204,"line":330,"context":262},136,{"file":204,"line":330,"context":262},{"file":204,"line":333,"context":262},146,{"file":204,"line":335,"context":262},153,{"file":204,"line":337,"context":262},154,{"file":204,"line":337,"context":262},{"file":204,"line":340,"context":262},163,{"file":204,"line":342,"context":262},164,{"file":204,"line":344,"context":262},168,{"file":204,"line":344,"context":262},{"file":204,"line":344,"context":262},{"file":209,"line":348,"context":262},616,[],[351,368,386],{"entryPoint":352,"graph":353,"unsanitizedCount":67,"severity":41},"\u003ClyteCache> (lyteCache.php:0)",{"nodes":354,"edges":366},[355,360],{"id":356,"type":357,"label":358,"file":260,"line":359},"n0","source","$_GET",214,{"id":361,"type":362,"label":363,"file":260,"line":364,"wp_function":365},"n1","sink","header() [Header Injection]",273,"header",[367],{"from":356,"to":361,"sanitized":240},{"entryPoint":369,"graph":370,"unsanitizedCount":29,"severity":56},"lyte_check_yt_api_key_callback (options.php:401)",{"nodes":371,"edges":383},[372,374,377,381],{"id":356,"type":357,"label":373,"file":181,"line":293},"$_SERVER['SERVER_ADDR']",{"id":361,"type":362,"label":375,"file":181,"line":293,"wp_function":376},"echo() [XSS]","echo",{"id":378,"type":357,"label":379,"file":181,"line":380},"n2","$_POST",403,{"id":382,"type":362,"label":375,"file":181,"line":303,"wp_function":376},"n3",[384,385],{"from":356,"to":361,"sanitized":242},{"from":378,"to":382,"sanitized":242},{"entryPoint":387,"graph":388,"unsanitizedCount":29,"severity":56},"\u003Coptions> (options.php:0)",{"nodes":389,"edges":394},[390,391,392,393],{"id":356,"type":357,"label":373,"file":181,"line":293},{"id":361,"type":362,"label":375,"file":181,"line":293,"wp_function":376},{"id":378,"type":357,"label":379,"file":181,"line":380},{"id":382,"type":362,"label":375,"file":181,"line":303,"wp_function":376},[395,396],{"from":356,"to":361,"sanitized":242},{"from":378,"to":382,"sanitized":242},{"summary":398,"deductions":399},"The wp-youtube-lyte plugin v1.7.30 presents a mixed security posture.  On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and implementing nonce and capability checks on its entry points. The static analysis shows a relatively small attack surface with no unprotected entry points and no critical or high severity taint flows. However, concerns arise from the output escaping, with only 52% of outputs properly escaped, indicating a potential for Cross-Site Scripting (XSS) vulnerabilities. The presence of file operations and external HTTP requests, while not inherently problematic, warrants careful review in conjunction with the output escaping findings.\n\nThe vulnerability history reveals a past pattern of medium and low severity issues, specifically Open Redirect and Cross-Site Scripting. While there are no currently unpatched vulnerabilities and the last reported issue was in late 2025 (likely a future date error in the provided data), the recurring nature of XSS vulnerabilities in its history is a significant flag. This suggests that while the developers may address vulnerabilities, the underlying coding practices might still introduce similar weaknesses, particularly concerning output sanitization. The fact that there are known CVEs, even if patched, indicates past security weaknesses that could potentially reappear if code quality is not consistently high.\n\nIn conclusion, the plugin has strengths in its handling of direct database interactions and securing its entry points. However, the significant proportion of unescaped output is a substantial risk for XSS. Coupled with a history of XSS vulnerabilities, this requires vigilant monitoring and potentially further code auditing to ensure robust sanitization practices are enforced. The future implications of the \"last vulnerability\" date in 2025 should be disregarded as erroneous.",[400,402,405],{"reason":401,"points":169},"Insufficient output escaping",{"reason":403,"points":404},"Past XSS vulnerabilities history",7,{"reason":406,"points":137},"Past Open Redirect vulnerabilities history","2026-03-16T17:26:10.750Z",{"wat":409,"direct":418},{"assetPaths":410,"generatorPatterns":413,"scriptPaths":414,"versionParams":415},[411,412],"\u002Fwp-content\u002Fplugins\u002Fwp-youtube-lyte\u002Fbg-image-layzload.min.js","\u002Fwp-content\u002Fplugins\u002Fwp-youtube-lyte\u002Flyte-min.js",[],[412,411],[416,417],"wp-youtube-lyte\u002Flyte-min.js?wyl_version=","wp-youtube-lyte\u002Fbg-image-layzload.min.js?wyl_version=",{"cssClasses":419,"htmlComments":423,"htmlAttributes":426,"restEndpoints":435,"jsGlobals":436,"shortcodeOutput":438},[247,420,421,422],"lyte-video","lyte-hide-poster","lyte-wrapper",[424,425],"LYTE_INTERNAL_SCRIPT","LYTE_INITIALIZE",[427,428,429,430,431,432,433,434],"data-lyte-privacy","data-lyte-width","data-lyte-height","data-lyte-poster","data-lyte-video-id","data-lyte-playlist-id","data-lyte-youtube-id","data-lyte-youtube-playlist",[],[247,437],"lyteDefaults",[439,440],"\u003Cdiv class=\"lyte-wrapper\">","\u003Cdiv class=\"lyte-video\">"]