Plugin icon

Presto Player

presto-player

Vulnerabilities:

6

Last Updated:

October 15, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
Presto Player < 4.5.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content
Fixed in
Fixed in 4.5.2
CVSS
7.2 (high)
Published
2026-10-05
Title
Presto Player < 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.5.3
CVSS
5.5 (medium)
Published
2026-06-11
Title
The Ultimate Video Player For WordPress < 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link_url' Shortcode Attribute
Fixed in
Fixed in 4.2.1
CVSS
5.5 (medium)
Published
2026-05-19
Title
The Ultimate Video Player For WordPress – by Presto Player < 4.1.4 - Missing Authorization
Fixed in
Fixed in 4.1.4
CVSS
5.3 (medium)
Published
2024-08-16
Title
Presto Player < 3.0.3 - Missing Authorization
Fixed in
Fixed in 3.0.3
CVSS
4.3 (medium)
Published
2024-03-20
Title
The Ultimate Video Player For WordPress < 2.2.3 - Contributor+ Stored XSS
Fixed in
Fixed in 2.2.3
CVSS
5.9 (medium)