Advisories · Technology

nicashmu Post Video Players.

Every CVE that names nicashmu Post Video Players among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54864 CVE record

CVSS 7.1 High

WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability
- nicashmu Post Video Players
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2025-62143 CVE record

CVSS 4.3 Medium

WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability
- nicashmu Post Video Players
- Information disclosure
Not analysed yet 31 Dec 2025
CVE-2025-62142 CVE record

CVSS 5.9 Medium

WordPress Post Video Players plugin <= 1.163 - Cross Site Scripting (XSS) vulnerability
- nicashmu Post Video Players
- Cross-site scripting (XSS)
Not analysed yet 31 Dec 2025