ilGhera

Products

ProductCVEsExploitedLatest
JW Player for WordPress3–Sep 30, 2026
Woocommerce Support System2–Dec 13, 2024
Related Videos for JW Player1–Apr 17, 2025

Exploited and recent CVEs

  • CVE-2026-93512 High 7.1 WordPress JW Player for WordPress plugin <= 2.3.11 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39614 Medium 5.4 WordPress JW Player for WordPress plugin <= 2.3.6 - Broken Access Control vulnerability 0.2%
  • CVE-2025-32516 High 7.1 WordPress Related Videos for JW Player plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-41686 Medium 6.5 WordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability 0.3%
  • CVE-2024-33931 Medium 6.5 WordPress JW Player for WordPress plugin <= 2.3.3 - Broken Access Control vulnerability 0.4%
  • CVE-2023-41685 High 7.6 WordPress Woocommerce Support System Plugin <= 1.2.1 is vulnerable to SQL Injection 0.7%