Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-62143 EUVD-2025-206027GHSA-3jg6-956h-x8gj

WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability

Published Dec 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through <= 1.163.

Affected products

VendorProductAffectedFixed
nicashmu Post Video Players ≤ 1.163 —

References