ilGhera
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| JW Player for WordPress | 3 | – | Sep 30, 2026 |
| Woocommerce Support System | 2 | – | Dec 13, 2024 |
| Related Videos for JW Player | 1 | – | Apr 17, 2025 |
Exploited and recent CVEs
- CVE-2026-93512 WordPress JW Player for WordPress plugin <= 2.3.11 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-39614 WordPress JW Player for WordPress plugin <= 2.3.6 - Broken Access Control vulnerability 0.2%
- CVE-2025-32516 WordPress Related Videos for JW Player plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-41686 WordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability 0.3%
- CVE-2024-33931 WordPress JW Player for WordPress plugin <= 2.3.3 - Broken Access Control vulnerability 0.4%
- CVE-2023-41685 WordPress Woocommerce Support System Plugin <= 1.2.1 is vulnerable to SQL Injection 0.7%