WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
video-share-vod
Published
2024-12-17
Title
Video Share VOD – Turnkey Video Site Builder Script < 2.6.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
video-share-vod
Published
2025-01-17
Title
Video Share VOD – Turnkey Video Site Builder Script < 2.6.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
video-share-vod
Published
2025-03-12
Title
Video Share VOD < 2.7.10 - Reflected Cross-Site Scripting
Slug
video-share-vod
Published
2025-08-27
Title
Video Share VOD – Turnkey Video Site Builder Script < 2.7.7 - Cross-Site Request Forgery to Command Injection
Slug
video-sidebar-widget
Published
2025-04-01
Title
Video Url <= 1.0.0.3 - Reflected Cross-Site Scripting
Slug
video-sidebar-widgets
Published
2023-01-26
Title
Download Video Sidebar Widgets <= 6.1 - Contributor+ Stored XSS via Shortcode
Slug
video-slider-with-thumbnails
Published
2023-05-15
Title
Video Gallery < 1.0.11 - Reflected XSS
Slug
video-synchro-pdf
Published
2022-03-30
Title
Videos sync PDF <= 1.7.4 - Unauthenticated LFI
Slug
video-synchro-pdf
Published
2022-04-19
Title
Videos sync PDF <= 1.7.4 - Stored Cross-Site Scripting via CSRF
Slug
video-thumbnails
Published
2022-11-02
Title
Video Thumbnails <= 2.12.3 - Admin+ Stored XSS
Slug
video-wc-gallery
Published
2024-11-05
Title
Video Gallery for WooCommerce < 1.32 - Missing Authorization to Unauthenticated Limited File Deletion
Slug
video-widget
Published
2024-06-05
Title
Video Widget <= 1.2.3 - Admin+ Stored XSS via Widget
Slug
video_player_youtube_vimeo
Published
2025-07-16
Title
Youtube Vimeo Video Player and Slider < 3.9 - Reflected Cross-Site Scripting
Slug
videographywp
Published
2025-12-30
Title
Featured Video for WordPress – VideographyWP < 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
videojs-hls-player
Published
2025-02-24
Title
Video.js HLS Player <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
videojs-html5-player
Published
2022-11-22
Title
Videojs HTML5 Player < 1.1.9 - Contributor+ Stored XSS
Slug
videojs-html5-player
Published
2024-05-23
Title
Videojs HTML5 Player < 1.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via videojs_video Shortcode
Slug
videojs-html5-video-player-for-wordpress
Published
2023-01-26
Title
Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode
Slug
videos
Published
2025-04-02
Title
Videos <= 1.0.5 - Reflected Cross-Site Scripting
Slug
videos-on-admin-dashboard
Published
2020-01-11
Title
Video on Admin Dashboard < 1.1.4 - Authenticated Stored XSS
Slug
videowall
Published
2014-08-01
Title
Videowall - index.php page_id Parameter Reflected XSS
Slug
videowhisper-live-streaming-integration
Published
2014-02-26
Title
VideoWhisper Live Streaming Integration 4.29.6 - videowhisper_streaming.php Multiple Parameter XSS
Slug
videowhisper-live-streaming-integration
Published
2014-02-27
Title
VideoWhisper Live Streaming Integration 4.27.3 - Multiple Vulnerabilities
Slug
videowhisper-live-streaming-integration
Published
2014-06-12
Title
VideoWhisper Live Streaming Integration < 4.27.4 - Cross-Site Scripting (XSS)
Slug
videowhisper-live-streaming-integration
Published
2013-08-23
Title
VideoWhisper Live Streaming Integration < 4.67.17 - Reflected Cross-Site Scripting (XSS)