Extension WordPress
Vulnérabilités HDW Player Plugin (Video Player & Video Gallery)
Cette page rassemble les failles publiées pour HDW Player Plugin (Video Player & Video Gallery), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de HDW Player Plugin (Video Player & Video Gallery)
2 fiches
HDW Player Plugin (Video Player & Video Gallery) <= 5.0 – Cross-Site Scripting
The HDW Player Plugin (Video Player & Video Gallery) plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-5.0
Non indiqué
29/11/2023
HDW Player Plugin (Video Player & Video Gallery) <= 2.4.2 – Authenticated (Admin+) SQL Injection
SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php.
*-2.4.2
3.0
28/05/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.