Video Player for YouTube
Healthy: released 10 days ago, tested with WordPress 7.1, no open vulnerabilities.
Based on 3 of 5 areas
Capped at 95: not enough support or review data for a full score.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | No data |
| Reputation | No data |
Active signals
Open issues right now, with links to the source.
- InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
History: 6 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.
Quick answers
- Is Video Player for YouTube still maintained?
- Yes. Last release 26 Oct 2026, 16 releases in the last 24 months. 26 Oct 2026 · wordpress.org
- Who owns Video Player for YouTube, and has it changed hands?
- Changed. New committer tomorbplugins made a first commit on 16 Jul 2026. 16 Jul 2026 · SVN log
- Was Video Player for YouTube removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Video Player for YouTube safe?
- 6 known vulnerabilities, all fixed (latest in 2.1.4). Not on the exploited list. 27 Oct 2026 · Wordfence Intelligence
- Is the latest Video Player for YouTube update safe to install?
- No ownership change before 2.1.4. No one-star spike after it. 26 Oct 2026 · Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 16 Apr 2019 to 16 Apr 2019, 1 commits |
|---|---|
| abuhayat | 17 Apr 2019 to 13 Mar 2024, 48 commits |
| shehabulislam | 10 Nov 2020 to 17 Feb 2025, 50 commits |
| noornabi2 | 21 Jul 2025 to 10 Apr 2026, 29 commits |
| tomorbplugins | 16 Jul 2026 to 16 Jul 2026, 2 commits |
| bplugins | 28 Jul 2026 to 6 Aug 2026, 3 commits |
| shamim10 | 29 Aug 2026 to 26 Oct 2026, 8 commits |
New committer tomorbplugins made a first commit on 16 Jul 2026. New committer shamim10 made a first commit on 29 Aug 2026. New committer bplugins made a first commit on 28 Jul 2026.
Maintenance
- Last release
- 10 days ago
- Releases, 24 months
- 16
- Tested up to
- 7.1 current
- Requires PHP
- 7.1 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 1 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 0 |
| Q3 2025 | 3 |
| Q4 2025 | 3 |
| Q1 2026 | 2 |
| Q2 2026 | 1 |
| Q3 2026 | 4 |
| Q4 2026 | 2 |
Last release 26 Oct 2026. Tested with WordPress 7.1 (current).
Support
- Resolved, last 2 months
- 100%
- Threads, last 2 months
- 1
Trend appears after 8 weekly snapshots.
Security record
3 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 2.1.4).
Show 6 patched vulnerabilities
| Date | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 27 Oct 2026 | Missing Authorization | 4.3 | <= 2.1.3 | 2.1.4 | Before disclosure |
| 5 Sep 2026 | Authenticated (Contributor+) SQL Injection | 6.5 | < 2.1.0 | 2.1.0 | Before disclosure |
| 22 Jul 2026 | Missing Authorization | 5.3 | <= 2.1.2 | 2.1.3 | 96 |
| 18 Jul 2023 | Reflected Cross-Site Scripting via fs_request_get | 6.1 | <= 1.5.1 | 1.5.2 | Before disclosure |
| 4 Mar 2022 | Missing Authorization Checks | 6.3 | < 1.5.1 | 1.5.1 | n/a |
| 22 Sep 2021 | Cross-Site Scripting | 5.4 | < 1.4 | 1.4 | n/a |
Changelog mentions of security fixes: 2.1.0 (security, sanitize); 2.1.1 (security, XSS, escaping, sanitize); 2.1.2 (security); 2.1.3 (security, nonce); 2.1.4 (security, authorization).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: no reviews. Lifetime: 4.8.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 4.8 |
| 5 star | 11 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 1 |
| 1 star | 0 |
Momentum
- Active installs
- 1,000+
- Downloads, last full week
- 1,104
| 4 May 2026 | 38 |
|---|---|
| 11 May 2026 | 117 |
| 18 May 2026 | 158 |
| 25 May 2026 | 145 |
| 1 Jun 2026 | 81 |
| 8 Jun 2026 | 101 |
| 15 Jun 2026 | 69 |
| 22 Jun 2026 | 65 |
| 29 Jun 2026 | 87 |
| 6 Jul 2026 | 107 |
| 13 Jul 2026 | 746 |
| 20 Jul 2026 | 206 |
| 27 Jul 2026 | 174 |
| 3 Aug 2026 | 167 |
| 10 Aug 2026 | 115 |
| 17 Aug 2026 | 110 |
| 24 Aug 2026 | 646 |
| 31 Aug 2026 | 713 |
| 7 Sep 2026 | 400 |
| 14 Sep 2026 | 262 |
| 21 Sep 2026 | 882 |
| 28 Sep 2026 | 327 |
| 5 Oct 2026 | 215 |
| 12 Oct 2026 | 194 |
| 19 Oct 2026 | 293 |
| 26 Oct 2026 | 1,104 |
Weekly downloads over the last 4 weeks are 56% above the 26-week average.
Facts
- Full name
- Video Player for YouTube - Embed Videos Your Visitors Will Love to Watch
- Version
- 2.1.4
- Author
- bPlugins
- Added
- 17 Apr 2019
- Last updated
- 26 Oct 2026
- Active installs
- 1,000+
- Requires WordPress
- 6.5
- Tested up to
- 7.1.4
- Requires PHP
- 7.1
- Category
- Communication & Messaging > Transactional Email
- Tags
- plyr, youtube, video player, YouTube embed, youtube Video Player
Other plugins by this author: HTML5 Video Player, PDF Poster, Advanced Post Block, Advance Custom HTML, HTML5 Audio Player, 3D Viewer, Document Embedder, Carousel Block, Document Embedder Addons for Elementor, Button Block, bSlider, Animated Text Block
Questions about Video Player for YouTube
Is Video Player for YouTube still maintained?
Yes. Last release 26 Oct 2026, 16 releases in the last 24 months.
Who owns Video Player for YouTube, and has it changed hands?
Changed. New committer tomorbplugins made a first commit on 16 Jul 2026.
Was Video Player for YouTube removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Video Player for YouTube safe?
6 known vulnerabilities, all fixed (latest in 2.1.4). Not on the exploited list.
Is the latest Video Player for YouTube update safe to install?
No ownership change before 2.1.4. No one-star spike after it.