A vulnerability described as problematic has been identified in Video Merchant Plugin up to 5.0.4 on WordPress. Affected by this issue is the function video_merchant_add_video_file. Executing manipulation can lead to cross-site request forgery.

This vulnerability appears as CVE-2025-14390. The attack may be performed from remote. There is no available exploit.