WordPress Presto Player Vulnerabilities

Wordpress Presto Player vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

12 June 2026

The Ultimate Video Player For WordPress <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link_url' Shortcode Attribute
CVE-2026-9125
WordPressPresto Player6.4MEDIUM

19 May 2026

Missing Authorization Vulnerability in Brainstorm Force Presto Player
CVE-2026-45442
WordPressPresto Player4.3MEDIUM

1 November 2024

WordPress Presto Player plugin <= 3.0.2 - Broken Access Control vulnerability
CVE-2024-43285
WordPressPresto Player6.3MEDIUM