Vulnerabilities / The Ultimate Video Player For WordPress – by Presto Player
The Ultimate Video Player For WordPress – by Presto Player vulnerabilities
Advisories WPSec published for Presto Player. Other sources may list more. Its attack surface: The Ultimate Video Player For WordPress – by Presto Player on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0325 | The Ultimate Video Player For WordPress – by Presto Player <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes | Medium 6.4 | 4.5.3 |
| 2026-10-02 | WPSEC-2026-0291 | The Ultimate Video Player For WordPress – by Presto Player <= 4.5.1 - Unauthenticated Stored Cross-Site Scripting via presto-player Tag | High 7.2 | 4.5.2 |
License: CC BY 4.0