2winfactor

2 CVEs in 1 2winfactor product, including Presto Player. Newest: CVE-2026-96682 (2026-10-10). Severity, EPSS and public exploits for each.

2winfactor products with known CVEs

ProductCVEs
Presto Player2
2winfactor CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-96682High7.22026-10-10The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via <presto-player> Tag in all versions up to, and incl…
CVE-2026-9125Medium6.42026-06-12The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_url' parameter of the [presto_player_overlay] shortcode in ve…