Read the docs

Hdwplayer

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Hdwplayer records in CISA KEV

No Hdwplayer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hdw-player-video-player-video-gallery 1 record LOW Hdw Player 1 record LOW

Records

4 records

TI-2020-19353 CVE-2020-37218 · GHSA-7969-fm8r-vgcj

Joomla com_hdwplayer 4.2 SQL Injection via search.php

Priority HIGH 77

Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch param…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0027 Published 2026-05-13 No fix listed CWE-89
TI-2014-04229 CVE-2014-5180 · GHSA-9mrw-r8gh-mv5r

SQL injection vulnerability in the videos page in the HDW Player Plugin…

Priority LOW 33

SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02306 Published 2014-08-06 No fix listed CWE-89
TI-2025-17490 CVE-2025-23723 · GHSA-5r88-5x2p-67vq

WordPress Plestar Directory Listing plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hdw player Plestar Directory Listing plestar-directory-listing allows Reflected XSS.This issue affects Plestar Directo…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-01-23 No fix listed CWE-79
Open these records in search →