Approved changes feed: RSS · Atom

cpe:2.3:a:videowhisper:video_presentation:3.31.17:*:*:*:*:wordpress:*:*

part: a version: 3.31.17 update: *

VendorVideowhisper (3fa34018-7a89-5b29-a930-e9dcfd4be8ec)
ProductVideo Presentation (d1c89271-7bca-53b2-a8b9-49e8f13bb0ab)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/videowhisper-video-presentation purl2cpe 2026-06-01 10:13:29.061348

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-9272 vulnerable 2026-06-03 14:35:19.540436 Details available
The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code.
Published: 2018-10-05T05:00:00.000Z
Updated: 2024-09-17T01:20:41.435Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.