Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Vendor: Wphowto Clear all filters
TI-2022-03653 CVE-2022-3984 · GHSA-vc27-q7r5-rh9q

Flowplayer Video Player < 1.0.5 - Contributor+ Stored XSS

Priority MEDIUM 58

The Flowplayer Video Player WordPress plugin before 1.0.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor t…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00495 Published 2022-12-19 Fixed in 1.0.5
TI-2022-03654 CVE-2022-3985 · GHSA-jqh4-9qpc-r65p

Videojs HTML5 Player < 1.1.9 - Contributor+ Stored XSS

Priority MEDIUM 58

The Videojs HTML5 Player WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to p…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00495 Published 2022-12-19 Fixed in 1.1.9