nicashmu
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Post Video Players | 3 | – | Oct 29, 2026 |
| Cincopa video and media plug-in | 1 | – | Jun 24, 2026 |
Exploited and recent CVEs
- CVE-2026-54864 WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-10092 Cincopa video and media plug-in <= 1.163 - Unauthenticated Stored Cross-Site Scripting via cincopa Shortcode in Post Comments 0.4%
- CVE-2025-62143 WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability 0.2%
- CVE-2025-62142 WordPress Post Video Players plugin <= 1.163 - Cross Site Scripting (XSS) vulnerability 0.2%