hdw-player HDW Player Plugin (hdw-player-video-player-video-gallery) for WordPress 2.4.2
Approved changes feed: RSS · Atom
cpe:2.3:a:hdwplayer:hdw-player-video-player-video-gallery:2.4.2:*:*:*:*:wordpress:*:*
part: a version: 2.4.2 update: *
| Vendor | Hdwplayer (e01ba3f6-ba01-564a-b5b5-02305984249c) |
|---|---|
| Product | Hdw Player Video Player Video Gallery (64f5dcf6-2dfa-55ef-a40b-6d0fe5b62254) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/hdw-player-video-player-video-gallery |
purl2cpe | 2026-06-01 10:16:54.706915 |
pkg:github/wpplugins/hdw-player-video-player-video-gallery |
purl2cpe | 2026-06-01 10:16:54.706918 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-5180 |
vulnerable | 2026-06-08 05:05:47.111935 |
Details available
SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php.
Published: 2014-08-06T19:00:00.000Z
Updated: 2024-09-17T03:28:00.644Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.