Threat database

4 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-93512JW Player for WordPress · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-93512 Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions. EPSS 0.2%Vulnerability ilGhera #cwe-79	CVE Database V5	2026-09-30
Medium	5.4	EPSS 0.2%	CVE-2026-39614JW Player for WordPress · Missing Authorization Medium5.4EPSS 0.2%2026-04-08CVE Database V5CVE-2026-39614 Missing Authorization vulnerability in ilGhera JW Player for WordPress jw-player-7-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JW Player for WordPress: from n/a through <= 2.3.6. EPSS 0.2%Vulnerability ilGhera	CVE Database V5	2026-04-08
High	7.1	EPSS 0.3%	CVE-2025-32516Related Videos for JW Player · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in ilGhera… High7.1EPSS 0.3%2025-04-17CVE Database V5CVE-2025-32516 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ilGhera Related Videos for JW Player related-videos-for-jw-player allows Reflected XSS.This issue affects Related Videos for JW Player: from n/a through <= 1.2.0. EPSS 0.3%Vulnerability ilGhera	CVE Database V5	2025-04-17
Medium	6.5	EPSS 0.4%	CVE-2024-33931JW Player for WordPress · Missing Authorization Medium6.5EPSS 0.4%2024-05-03CVE Database V5CVE-2024-33931 Missing Authorization vulnerability in ilGhera JW Player for WordPress.This issue affects JW Player for WordPress: from n/a through 2.3.3. EPSS 0.4%Vulnerability ilGhera #cwe-862	CVE Database V5	2024-05-03

Showing 1–4 of 4 results