CVE-2026-62044

The bPlugins Super Video Player WordPress plugin (versions ≤ 1.8.13 ) is vulnerable to a PHP Object Injection flaw. This issue stems from the Deserialization of Untrusted Data , which can allow an attacker to inject objects into the application. The impact includes high levels of risk to confiden...

EUVD-2026-96374

Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...

WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Plugin Super Video Player versions = 1.8.13...

WordPress Super Video Player Plugin < 1.6.13 is vulnerable to Cross Site Scripting (XSS)

Software Super Video Player Type Plugin Vulnerable versions 1.6.13 Fixed in 1.6.13 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a2d8b09b91b6 Credits Rafie Muhammad Patchstack...

WordPress Super Video Player plugin <= 1.6.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Super Video Player plugin versions = 1.6.9. Solution Update the WordPress Super Video Player plugin to the latest available version at least 1.6.11...