Hdwplayer

3 CVEs in 3 Hdwplayer products, including Com Hdwplayer, Hdw Player, Hdw-Player-Video-Player-Video-Gallery. Newest: CVE-2020-37218 (2026-05-13).

Hdwplayer products with known CVEs

ProductCVEs
Com Hdwplayer1
Hdw Player1
Hdw-Player-Video-Player-Video-Gallery1
Hdwplayer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-37218High8.22026-05-13Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries…
CVE-2023-49178High7.12023-12-15Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mr. Hdwplayer HDW Player Plugin (Video Player & Video Gal…
CVE-2014-51802014-08-06SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated…