Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: nicashmu Clear all filters
TI-2026-08846 CVE-2026-10092 · GHSA-jhg4-5fww-9vvr

Cross-site scripting in nicashmu Cincopa video and media plug-in

Priority LOW 38

The Cincopa video and media plug-in plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cincopa Shortcode in Post Comments in all versions up to, and including, 1.163 due to insufficient input sanitizat…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00405 Published 2026-06-24 No fix listed CWE-79
TI-2025-38465 CVE-2025-62143 · GHSA-3jg6-956h-x8gj

WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability

Priority LOW 19

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Vi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00209 Published 2025-12-31 No fix listed CWE-497
TI-2025-38464 CVE-2025-62142 · GHSA-mv8j-h3m3-79c2

WordPress Post Video Players plugin <= 1.163 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Stored XSS.This issue affects Post Video Players:…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00207 Published 2025-12-31 No fix listed CWE-79