nicashmu

Products

ProductCVEsExploitedLatest
Post Video Players3–Oct 29, 2026
Cincopa video and media plug-in1–Jun 24, 2026

Exploited and recent CVEs

  • CVE-2026-54864 High 7.1 WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-10092 High 7.2 Cincopa video and media plug-in <= 1.163 - Unauthenticated Stored Cross-Site Scripting via cincopa Shortcode in Post Comments 0.4%
  • CVE-2025-62143 Medium 4.3 WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2025-62142 Medium 5.9 WordPress Post Video Players plugin <= 1.163 - Cross Site Scripting (XSS) vulnerability 0.2%