Read the docs

nicashmu

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nicashmu records in CISA KEV

No nicashmu vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-08846 CVE-2026-10092 · GHSA-jhg4-5fww-9vvr

Cross-site scripting in nicashmu Cincopa video and media plug-in

Priority LOW 38

The Cincopa video and media plug-in plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cincopa Shortcode in Post Comments in all versions up to, and including, 1.163 due to insufficient input sanitizat…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00405 Published 2026-06-24 No fix listed CWE-79
TI-2025-38464 CVE-2025-62142 · GHSA-mv8j-h3m3-79c2

WordPress Post Video Players plugin <= 1.163 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Stored XSS.This issue affects Post Video Players:…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00207 Published 2025-12-31 No fix listed CWE-79
TI-2025-38465 CVE-2025-62143 · GHSA-3jg6-956h-x8gj

WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability

Priority LOW 19

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Vi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00209 Published 2025-12-31 No fix listed CWE-497
Open these records in search →