2winfactor
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Presto Player | 2 | – | Oct 10, 2026 |
Exploited and recent CVEs
- CVE-2026-96682 Presto Player <= 4.5.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content via <presto-player> Tag 0.2%
- CVE-2026-9125 The Ultimate Video Player For WordPress <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link_url' Shortcode Attribute 0.4%