CVE-2026-109893

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affects Presto Player: from n/a through 4.5.3...

CVE-2026-109893 WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affects Presto Player: from n/a through 4.5.3...

EUVD-2026-102254

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affects Presto Player: from n/a through 4.5.3...

CVE-2026-109893

The Brainstorm Force Presto Player WordPress plugin, affecting versions up to and including 4.5.3 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. This issue stems from the improper neutralization of input during web page generation , which could allow an attacker to execute malicious...

WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dzaku in WordPress Plugin Presto Player versions = 4.5.3...

CVE-2026-109893: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affects Presto Player: from n/a through 4.5.3...

CVE-2026-66481

Author Arbitrary File Deletion in Presto Player Pro = 3.0.1 versions...

CVE-2026-66481 WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnerability

Author Arbitrary File Deletion in Presto Player Pro = 3.0.1 versions...

EUVD-2026-96514

Author Arbitrary File Deletion in Presto Player Pro = 3.0.1 versions...

CVE-2026-66481

The Presto Player Pro plugin for WordPress (versions

CVE-2026-96682

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-96682

The Presto Player plugin for WordPress (versions up to and including 4.5.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the comment content via the tag. An unauthenticated attacker can inject arbitrary web scr...

EUVD-2026-96106

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-96682 Presto Player <= 4.5.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <presto-player> Tag

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-96682: Improper Neutralization of Input During Web Page Generation

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-66481: Improper Limitation of a Pathname to a Restricted Directory

Author Arbitrary File Deletion in Presto Player Pro = 3.0.1 versions...

WordPress Presto Player plugin <= 4.5.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by 20kilograma in WordPress Plugin Presto Player versions = 4.5.1...

WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Presto Player Pro versions = 3.0.1...

CVE-2026-102914

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affects Presto Player: from n/a through 4.5.2...

CVE-2026-102914

The Presto Player WordPress plugin (versions 4.5.2 and below ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to the Improper Neutralization of Input During Web Page Generation (CWE-79). This vulnerability allows an attacker to inject malicious scripts that are stored on the server...