FWDesign
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Ultimate Video Player | 2 | – | Sep 9, 2025 |
| Easy Video Player Wordpress & WooCommerce | 1 | – | Jul 16, 2025 |
| MP3 Sticky Player | 1 | – | Nov 23, 2024 |
| Ultimate Video Player WordPress & WooCommerce Plugin | 1 | – | Mar 7, 2025 |
Exploited and recent CVEs
- CVE-2025-49430 WordPress Ultimate Video Player Plugin <= 10.1 - Server Side Request Forgery (SSRF) Vulnerability 0.2%
- CVE-2025-49432 WordPress Ultimate Video Player Plugin <= 10.1 - Broken Access Control Vulnerability 0.3%
- CVE-2025-28955 WordPress Easy Video Player Wordpress & WooCommerce plugin <= 10.0 - Arbitrary File Download Vulnerability 0.6%
- CVE-2024-10804 Ultimate Video Player <= 10.0 - Unauthenticated Arbitrary File Download 0.8%
- CVE-2024-10803 MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download 0.9%