Extension WordPress
Vulnérabilités Cincopa video and media plug-in
Cette page rassemble les failles publiées pour Cincopa video and media plug-in, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Cincopa video and media plug-in
5 fiches
Cincopa video and media plug-in <= 1.163 – Unauthenticated Stored Cross-Site Scripting via cincopa Shortcode in Post Comments
The Cincopa video and media plug-in plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cincopa Shortcode in Post Comments in all versions up to, and including, 1.163 due to insufficient input sanitization and output escaping. This…
*-1.163
Non indiqué
23/06/2026
Post Video Players <= 1.163 – Authenticated (Contributor+) Information Exposure
The Cincopa video and media plug-in plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.163. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive…
*-1.163
Non indiqué
31/12/2025
Post Video Players <= 1.163 – Authenticated (Editor+) Stored Cross-Site Scripting
The Post Video Players plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.163 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access…
*-1.163
Non indiqué
31/12/2025
Post Video Players <= 1.159 – Cross-Site Request Forgery via cincopa_mp_mt_options_page
The Cincopa video and media plug-in plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.159. This is due to missing or incorrect nonce validation on the 'cincopa_mp_mt_options_page' function. This makes…
*-1.159
1.160
30/01/2024
Cincopa video and media plug-in < 1.137 – Cross-Site Request Forgery to Stored Cross-Site Scripting
The Cincopa video and media plug-in plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery via the ‘cincopaafc’ parameter in versions before 1.137 due to insufficient input sanitization and output escaping. This makes it…
[*, 1.137)
1.137
25/08/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.