Hdwplayer : Security Vulnerabilities, CVEs,
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mr. Hdwplayer HDW Player Plugin (Video Player & Video Gallery) allows Reflected XSS.This issue affects HDW Player Plugin (Video Player & Video Gallery): from n/a through 5.0.
Max CVSS
7.1
EPSS Score
0.05%
Published
2023-12-15
Updated
2023-12-20
SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php.
Max CVSS
6.5
EPSS Score
0.12%
Published
2014-08-06
Updated
2014-08-07
2 vulnerabilities found