High · 7.2 CVE-2026-62044 EUVD-2026-96374GHSA-hqm5-6vj2-27hv

WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Vendor: bPlugins Product: Super Video Player

Description

Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13.

Affected products

Vendor	Product	Affected	Fixed
bPlugins	Super Video Player	≤ 1.8.13	—

References

https://patchstack.com/database/wordpress/plugin/super-video-player/vulnerability/wordpress-super-video-player-plugin-1-8-13-php-object-injection-vulnerability?_s_id=cve vdb-entry