Skip to content
OpenAdvisories

Vendor

FWDesign

5 known vulnerabilities.

Products

Ultimate Video Player 2 Ultimate Video Player WordPress & WooCommerce Plugin 1 Easy Video Player Wordpress & WooCommerce 1 MP3 Sticky Player 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2025-49430

    WordPress Ultimate Video Player Plugin <= 10.1 - Server Side Request Forgery (SSRF) Vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in FWDesign Ultimate Video Player fwduvp allows Server Side Request Forgery.This issue affects Ultimate Video Player: from n/a through <= 10.1.

    FWDesign Ultimate Video Player
  • High 7.5
    CVE-2025-28955

    WordPress Easy Video Player Wordpress & WooCommerce plugin <= 10.0 - Arbitrary File Download Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in FWDesign Easy Video Player Wordpress & WooCommerce fwdevp allows Path Traversal.This issue affects Easy Video Player Wordpress & WooCommerce: from n/a through <= 1…

    FWDesign Easy Video Player Wordpress & WooCommerce Web / CMS
  • High 7.5
    CVE-2024-10804

    Ultimate Video Player <= 10.0 - Unauthenticated Arbitrary File Download

    The Ultimate Video Player WordPress & WooCommerce Plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 10.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the…

    FWDesign Ultimate Video Player WordPress & WooCommerce Plugin Web / CMS
  • High 7.5
    CVE-2024-10803

    MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download

    The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the …

    FWDesign MP3 Sticky Player Web / CMS