CVE Intelligence

Nicashmu Post Video Players vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Nicashmu Post Video Players: 2 record(s), with affected versions and fixes.

CVE-2025-62143 Medium · 4.3 CWE-497 Dec 31, 2025
WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through <= 1.163.
CVE-2025-62142 Medium · 5.9 CWE-79 Dec 31, 2025
WordPress Post Video Players plugin <= 1.163 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Stored XSS.This issue affects Post Video Players: from n/a through <= 1.163.