CVE-2024-5173

The HT Mega – Absolute Addons For Elementor WordPress plugin (versions ≤ 2.5.5) is vulnerable to stored XSS via the Video Player widget settings due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor level or higher, enabling injectio...

Malicious code in acpc-poker-player_proxy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6363 Malicious code in acpc-poker-player_proxy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2819 Malicious code in @ozon-shared-deps/ozon-fe__media-player-super-lite (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2818 Malicious code in @ozon-shared-deps/ozon-fe__media-player-standard (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1849 Malicious code in @ozon-shared-deps/bx-fe__video-player (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2653 Malicious code in media-player (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

CVE-2024-5522

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

CVE-2024-5522

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

CVE-2024-5522

Summary: CVE-2024-5522 affects the WordPress HTML5 Video Player plugin (

CVE-2024-5522 HTML5 Video Player < 2.5.27 - Unauthenticated SQLi

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

CVE-2024-5522 HTML5 Video Player < 2.5.27 - Unauthenticated SQLi

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

CVE-2024-34753

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

CVE-2024-34753

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

CVE-2024-34753 WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerability

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

CVE-2024-34753 WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerability

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

CVE-2024-34753

CVE-2024-34753 corresponds to a Missing Authorization (Broken Access Control) vulnerability affecting WordPress Radio Player (SoftLab Radio Player). Connected sources identify the affected package as Radio Player for WordPress, with versions listed as n/a through 2.0.73. The root cause is an auth...

PT-2024-6619

Name of the Vulnerable Software and Affected Versions: VLC media player versions 3.0.20 and earlier Description: The issue is related to an integer overflow in VLC media player, which could be triggered by a maliciously crafted mms stream, potentially leading to a denial of service or arbitrary...

WordPress plugin Radio Player security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

greatminds.smartplayer.video Cross Site Scripting vulnerability OBB-3934276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...