Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: 2winfactor Clear all filters
TI-2026-70210 CVE-2026-96682 · GHSA-rg8w-j32p-wvqw

Stored cross-site scripting in Presto Player WordPress plugin

Priority LOW 31

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via <presto-player> Tag in all versions up to, and including, 4.5.1 due to insufficient input sanitization and outpu…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00241 Published 2026-10-10 No fix listed CWE-79
TI-2026-08022 CVE-2026-9125 · GHSA-2m85-j8xj-wrg2

Cross-site scripting in 2winfactor Presto Player

Priority LOW 28

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_url' parameter of the [presto_player_overlay] shortcode in versions up to, and including, 4.2.0 This is due to insufficien…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00355 Published 2026-06-12 No fix listed CWE-79