Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Hdwplayer Clear all filters
TI-2020-19353 CVE-2020-37218 · GHSA-7969-fm8r-vgcj

Joomla com_hdwplayer 4.2 SQL Injection via search.php

Priority HIGH 77

Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch param…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0027 Published 2026-05-13 No fix listed CWE-89
TI-2025-17490 CVE-2025-23723 · GHSA-5r88-5x2p-67vq

WordPress Plestar Directory Listing plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hdw player Plestar Directory Listing plestar-directory-listing allows Reflected XSS.This issue affects Plestar Directo…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-01-23 No fix listed CWE-79
TI-2014-04229 CVE-2014-5180 · GHSA-9mrw-r8gh-mv5r

SQL injection vulnerability in the videos page in the HDW Player Plugin…

Priority LOW 33

SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02306 Published 2014-08-06 No fix listed CWE-89