CVE-2026-62044

Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...

CVE-2026-62044 WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...

CVE-2026-62044

The bPlugins Super Video Player WordPress plugin (versions ≤ 1.8.13 ) is vulnerable to a PHP Object Injection flaw. This issue stems from the Deserialization of Untrusted Data , which can allow an attacker to inject objects into the application. The impact includes high levels of risk to confiden...

EUVD-2026-96374

Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...

CVE-2026-62044: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...

PT-2026-109703

Name of the Vulnerable Software and Affected Versions Super Video Player versions prior to 1.8.14 Description Deserialization of untrusted data in the bPlugins Super Video Player plugin allows for Object Injection. This occurs when the application deserializes data from an untrusted source withou...

WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Plugin Super Video Player versions = 1.8.14...

WordPress Super Video Player Plugin < 1.6.13 is vulnerable to Cross Site Scripting (XSS)

Software Super Video Player Type Plugin Vulnerable versions 1.6.13 Fixed in 1.6.13 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a2d8b09b91b6 Credits Rafie Muhammad Patchstack...

WordPress Super Video Player plugin <= 1.6.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Super Video Player plugin versions = 1.6.9. Solution Update the WordPress Super Video Player plugin to the latest available version at least 1.6.11...