Plugin icon

Presto Player

presto-player

Vulnerabilities:

4

Last Updated:

June 23, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-06-11
Title
The Ultimate Video Player For WordPress < 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link_url' Shortcode Attribute
Fixed in
Fixed in 4.2.1
CVSS
5.5 (medium)
Published
2026-05-19
Title
The Ultimate Video Player For WordPress – by Presto Player < 4.1.4 - Missing Authorization
Fixed in
Fixed in 4.1.4
CVSS
5.3 (medium)
Published
2024-08-16
Title
Presto Player < 3.0.3 - Missing Authorization
Fixed in
Fixed in 3.0.3
CVSS
4.3 (medium)
Published
2024-03-20
Title
The Ultimate Video Player For WordPress < 2.2.3 - Contributor+ Stored XSS
Fixed in
Fixed in 2.2.3
CVSS
5.9 (medium)