Ilghera

7 CVEs in 5 Ilghera products, including Jw Player For WordPress, Woocommerce Support System, Mailup Auto Subscription. Newest: CVE-2026-93512 (2026-09-30).

Ilghera products with known CVEs

ProductCVEs
Jw Player For WordPress3
Woocommerce Support System2
Mailup Auto Subscription1
Related Videos For Jw Player1
Woocommerce Support System1
Ilghera CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-93512High7.12026-09-30Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions.
CVE-2026-39614Medium5.42026-04-08Missing Authorization vulnerability in ilGhera JW Player for WordPress jw-player-7-for-wp allows Exploiting Incorrectly Configured Access Control Security Leve…
CVE-2025-32516High7.12025-04-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ilGhera Related Videos for JW Player related-videos-for-j…
CVE-2024-13521Medium6.12025-01-28The MailUp Auto Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missi…
CVE-2023-41686Medium6.52024-12-13Cross-Site Request Forgery (CSRF) vulnerability in ilGhera Woocommerce Support System allows Cross Site Request Forgery.This issue affects Woocommerce Support…
CVE-2024-33931Medium6.52024-05-03Missing Authorization vulnerability in ilGhera JW Player for WordPress.This issue affects JW Player for WordPress: from n/a through 2.3.3.
CVE-2023-41685High7.62023-11-06Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ilGhera Woocommerce Support System allows SQL Injection.T…