Skip to main content

Hdw Player Video Player Video Gallery

1 CVEs product

Monthly

CVE-2014-5180 Aug 06, 19:55 MEDIUM POC This Month

SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress SQLi Wordpress Plugin Hdw Player Video Player Video Gallery +1
NVD Exploit-DB
CVSS 2.0
6.5
EPSS
0.9%
EPSS 1% CVSS 6.5
MEDIUM POC This Month

SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress SQLi +3
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy