📦

web-dorado_spider_video_player

Vendor: web-dorado

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 9 Total Indexed
Avg. EPSS 0.46% Exploit Prob.
Latest CVE CVE-2015-4352 Jun 15

Security Vulnerability Index

Page 1 / 1
5.8 CVSS
CVE-2015-4352

Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors.

EPSS: 0.13%
4.9 CVSS
CVE-2015-4351

The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL.

EPSS: 0.57%
4.3 CVSS
CVE-2014-8584

Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS: 0.68%