Vulnerabilities

TI-2025-37428 CVE-2025-60062 · GHSA-jpxr-92fj-3jrp

WordPress tPlayer plugin <= 1.2.1.6 - SQL Injection vulnerability

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mmetrodw tPlayer tplayer-html5-audio-player-with-playlist allows SQL Injection.This issue affects tPlayer: from n/a th…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00346 Published 2025-12-18 No fix listed CWE-89

TI-2025-22582 CVE-2025-31401 · GHSA-c44j-83ph-xfxg

WordPress MMX – Make Me Christmas plugin <= 1.0.0 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in mmetrodw MMX – Make Me Christmas mmx-make-me-christmas allows Stored XSS.This issue affects MMX – Make Me Christmas: from n/a through <= 1.0.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00214 Published 2025-04-09 No fix listed CWE-352

Vulnerabilities

Filters

WordPress tPlayer plugin <= 1.2.1.6 - SQL Injection vulnerability

WordPress MMX – Make Me Christmas plugin <= 1.0.0 - CSRF to Stored XSS vulnerability