Lucene search
+L

28049 matches found

CVE
CVE
added 2024/02/01 10:39 a.m.46 views

CVE-2023-51689

CVE-2023-51689 affects the WordPress plugin Easy Video Player (naa986) up to version 1.2.2.10 with a Stored XSS vulnerability arising from improper input neutralization during web page generation. Public details identify the vulnerable component as the Easy Video Player plugin and the impact as s...

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/01 10:39 a.m.10 views

CVE-2023-51689 WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10...

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/01 10:39 a.m.28 views

CVE-2023-51689 WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/01 12:00 a.m.6 views

WordPress plugin Easy Video Player cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6.2AI score0.00328EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/30 9:15 a.m.7 views

CVE-2024-1061

The 'HTML5 Video Player' WordPress Plugin, version 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the 'getview' function...

9.8CVSS7.3AI score0.11215EPSS
SaveExploits1References1
Prion
Prion
added 2024/01/30 9:15 a.m.24 views

Sql injection

The 'HTML5 Video Player' WordPress Plugin, version 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the 'getview' function...

7.5CVSS8.4AI score0.11215EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2024/01/30 8:26 a.m.116 views

CVE-2024-1061

CVE-2024-1061 describes an unauthenticated SQL injection in the WordPress plugin “HTML5 Video Player” through the id parameter in the get_view function. Affected software: WordPress HTML5 Video Player plugin versions less than 2.5.25. Root cause: unauthenticated SQL injection in the id parameter....

9.8CVSS9.8AI score0.11215EPSS
SaveIn wildExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/30 8:26 a.m.9 views

CVE-2024-1061

The 'HTML5 Video Player' WordPress Plugin, version 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the 'getview' function...

8.6CVSS7.9AI score0.11215EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/01/30 12:00 a.m.10 views

WordPress Plugin HTML5 Video Player SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

9.8CVSS7.7AI score0.11215EPSS
SaveExploits1References2
WPVulnDB
WPVulnDB
added 2024/01/12 12:00 a.m.17 views

HTML5 MP3 Player with Playlist Free <= 3.0.0 - Authenticated (Author+) PHP Object Injecton

Description The HTML5 MP3 Player with Playlist Free plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.0 via deserialization of untrusted input. This makes it possible for authenticated attackers, with author-level access and above, to inject a PH...

9.1CVSS7.4AI score0.00616EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2024/01/12 12:00 a.m.24 views

HTML5 SoundCloud Player <= 2.8.0 - Authenticated (Author+) PHP Object Injection

Description The HTML5 SoundCloud Player with Playlist Free plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.8.0 via deserialization of untrusted input. This makes it possible for authenticated attackers, with author-level access and above, to inje...

9.1CVSS7.4AI score0.00618EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/08 9:15 p.m.9 views

CVE-2023-52202

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

7.2CVSS7.3AI score0.00618EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/08 9:15 p.m.27 views

CVE-2023-52202

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

9.1CVSS9.3AI score0.00618EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/08 9:15 p.m.15 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

5.8CVSS7.2AI score0.00618EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/08 8:52 p.m.16 views

CVE-2023-52202 WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

9.1CVSS7.2AI score0.00618EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/08 8:52 p.m.38 views

CVE-2023-52202 WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

9.1CVSS9.4AI score0.00618EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/08 8:52 p.m.49 views

CVE-2023-52202

CVE-2023-52202 affects the WordPress HTML5 MP3 Player with Folder Feedburner Playlist Free plugin (

9.1CVSS7.5AI score0.00618EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/01/08 8:15 p.m.8 views

CVE-2023-52205

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free.This issue affects HTML5 SoundCloud Player with Playlist Free: from n/a through 2.8.0...

7.2CVSS7.3AI score0.00618EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/08 7:15 p.m.11 views

CVE-2023-52207

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0...

8.8CVSS7.3AI score0.00616EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/08 7:15 p.m.22 views

CVE-2023-52207

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0...

9.1CVSS9.3AI score0.00616EPSS
SaveExploits0References1
Rows per page
Query Builder