Skip to content
OpenAdvisories

Vendor

nicashmu

4 known vulnerabilities.

Products

Post Video Players 3 Cincopa video and media plug-in 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-54864

    WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions.

    nicashmu Post Video Players
  • High 7.2
    CVE-2026-10092

    Cincopa video and media plug-in <= 1.163 - Unauthenticated Stored Cross-Site Scripting via cincopa Shortcode in Post Comments

    The Cincopa video and media plug-in plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cincopa Shortcode in Post Comments in all versions up to, and including, 1.163 due to insufficient input sanitization and output escaping. This makes it …

    nicashmu Cincopa video and media plug-in Web / CMS