WordPress security by component

Ultimate Video Player WordPress & WooCommerce Plugin

Plugin description

Ultimate Video Player WordPress & WooCommerce Plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 07, 2025; the highest CVE/CNA score is 7.5.

Plugin slug: ultimate-video-player-wordpress-woocommerce-plugin

Latest vulnerability

CVE-2024-10804: Ultimate Video Player WordPress & WooCommerce Plugin: Filesystem traversal

Ultimate Video Player WordPress & WooCommerce Plugin is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedMar 07, 2025

Safe version guidanceSee mitigation notes

		Safe version
Mar 07, 2025	CVE-2024-10804 Ultimate Video Player WordPress & WooCommerce Plugin: Filesystem traversal Ultimate Video Player WordPress & WooCommerce Plugin is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE7.5 NVDPending