WordPress security by component

tPlayer

Plugin description

tPlayer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 18, 2025; the highest CVE/CNA score is 9.3.

Plugin slug: tplayer-html5-audio-player-with-playlist

Latest vulnerability

CVE-2025-60062: tPlayer: SQL injection

tPlayer is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedDec 18, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 18, 2025	CVE-2025-60062 tPlayer: SQL injection tPlayer is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.3 NVDPending