Fwdesign

5 CVEs across 4 Fwdesign products. Browse Fwdesign vulnerabilities, severities, and proof-of-concept exploits.

Fwdesign products with known CVEs

ProductCVEs
Ultimate Video Player2
Easy Video Player WordPress & Woocommerce1
Mp3 Sticky Player1
Ultimate Video Player WordPress & Woocommerce Plugin1
Fwdesign CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-49430High7.22025-09-09Server-Side Request Forgery (SSRF) vulnerability in FWDesign Ultimate Video Player fwduvp allows Server Side Request Forgery.This issue affects Ultimate Video…
CVE-2025-49432Medium5.32025-08-15Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-28955High7.52025-07-16Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in FWDesign Easy Video Player Wordpress & WooCommerce fwdevp allow…
CVE-2024-10804High7.52025-03-07The Ultimate Video Player WordPress & WooCommerce Plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 10.0 v…
CVE-2024-10803High7.52024-11-23The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file…