CVE Intelligence

ilGhera JW Player for WordPress vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ilGhera JW Player for WordPress: 2 record(s), with affected versions and fixes.

CVE-2026-93512 High · 7.1 CWE-79 Sep 30, 2026
WordPress JW Player for WordPress plugin <= 2.3.11 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions.
CVE-2026-39614 Medium · 5.4 CWE-862 Apr 8, 2026
WordPress JW Player for WordPress plugin <= 2.3.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in ilGhera JW Player for WordPress jw-player-7-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JW Player for WordPress: from n/a through <= 2.3.6.