WordPress plugin HTML5 Video Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-13156: Improper Neutralization of Input During Web Page Generation

The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘heading’ parameter in all versions up to, and including, 2.5.35 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2025-2034

Name of the Vulnerable Software and Affected Versions HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress versions up to, and including, 2.5.35 Description The issue is related to DOM-Based Stored Cross-Site Scripting via the heading parameter due to insufficient input...

CVE-2025-22577

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Damion Armentrout Able Player wp-able-player allows DOM-Based XSS.This issue affects Able Player: from n/a through = 1.0...

CVE-2025-22536

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hiren.sabd WP Music Player wp-music-player allows SQL Injection.This issue affects WP Music Player: from n/a through = 1.3...

CVE-2025-22536 WordPress WP Music Player Plugin <= 1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hiren.sabd WP Music Player wp-music-player allows SQL Injection.This issue affects WP Music Player: from n/a through = 1.3...

CVE-2025-22536 WordPress WP Music Player Plugin <= 1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hiren Patel WP Music Player allows SQL Injection.This issue affects WP Music Player: from n/a through 1.3...

CVE-2025-22536

CVE-2025-22536 is an SQL injection vulnerability in the WordPress plugin WP Music Player, described as “Improper Neutralization of Special Elements used in an SQL Command” and affecting WP Music Player versions from n/a through 1.3. The connected Red Hat entry confirms the same CVE ID and descrip...

CVE-2025-22577 WordPress Able Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Damion Armentrout Able Player wp-able-player allows DOM-Based XSS.This issue affects Able Player: from n/a through = 1.0...

CVE-2025-22577

CVE-2025-22577 affects Able Player for WordPress (vulnerable: up to 1.0). The issue is a DOM-based XSS caused by improper neutralization of input during web page generation. CVSS indicates: Privileges Required: Low, User Interaction: Required, Attack Vector: Network, Scope: Changed, Confidentiali...

WordPress WP Music Player Plugin <= 1.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Music Player versions = 1.3...

CVE-2024-56279

Server-Side Request Forgery SSRF vulnerability in mra13 Compact WP Audio Player compact-wp-audio-player allows Server Side Request Forgery.This issue affects Compact WP Audio Player: from n/a through = 1.9.14...

WordPress Able Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Able Player versions = 1.0...

CVE-2024-56279

CVE-2024-56279 is a Server-Side Request Forgery (SSRF) vulnerability in Compact WP Audio Player (WordPress plugin) affecting versions up to 1.9.14. The issue is rated CVSS v3.1 base score 6.4 (Medium). Public records indicate the vulnerability is present in the plugin and has been addressed in pa...

WordPress plugin Compact WP Audio Player 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2025-4527

Name of the Vulnerable Software and Affected Versions Hiren Patel WP Music Player versions 1.3 and earlier Description The issue is related to the improper neutralization of special elements used in an SQL command, which allows for SQL injection. This means that an attacker could potentially inje...

PT-2025-4565

Name of the Vulnerable Software and Affected Versions Able Player versions prior to 1.0 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into the...

CVE-2024-56279: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in mra13 Compact WP Audio Player compact-wp-audio-player allows Server Side Request Forgery.This issue affects Compact WP Audio Player: from n/a through = 1.9.14...

WordPress plugin WP Music Player SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

CVE-2025-22536: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hiren.sabd WP Music Player wp-music-player allows SQL Injection.This issue affects WP Music Player: from n/a through = 1.3...