Read the docs

FWDesign

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

FWDesign records in CISA KEV

No FWDesign vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-20898 CVE-2025-28955 · GHSA-424g-qc5w-mhw6

WordPress Easy Video Player Wordpress & WooCommerce plugin <= 10.0 - Arbitrary File Download Vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in FWDesign Easy Video Player Wordpress & WooCommerce fwdevp allows Path Traversal.This issue affects Easy Video Player Wordpre…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00557 Published 2025-07-16 No fix listed CWE-22
TI-2024-10016 CVE-2024-10804 · GHSA-744x-ccgr-f8v9

Ultimate Video Player <= 10.0 - Unauthenticated Arbitrary File Download

Priority MEDIUM 40

The Ultimate Video Player WordPress & WooCommerce Plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 10.0 via the content/downloader.php file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00787 Published 2025-03-07 No fix listed CWE-22
TI-2025-31480 CVE-2025-49432 · GHSA-mfvx-x37r-j8rx

WordPress Ultimate Video Player Plugin <= 10.1 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Video Player: from n/a through <= 10.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00322 Published 2025-08-15 No fix listed CWE-862
Open these records in search →