Fwdesign
5 CVEs across 4 Fwdesign products. Browse Fwdesign vulnerabilities, severities, and proof-of-concept exploits.
Fwdesign products with known CVEs
Fwdesign CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-49430 | High | 7.2 | 2025-09-09 | Server-Side Request Forgery (SSRF) vulnerability in FWDesign Ultimate Video Player fwduvp allows Server Side Request Forgery.This issue affects Ultimate Video… |
CVE-2025-49432 | Medium | 5.3 | 2025-08-15 | Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-28955 | High | 7.5 | 2025-07-16 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in FWDesign Easy Video Player Wordpress & WooCommerce fwdevp allow… |
CVE-2024-10804 | High | 7.5 | 2025-03-07 | The Ultimate Video Player WordPress & WooCommerce Plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 10.0 v… |
CVE-2024-10803 | High | 7.5 | 2024-11-23 | The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file… |