N/A
2023-08-19< 2.1.15
WordPress JW Player Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)
Minimum safe version
2.1.15
Update to 2.1.15 or later to address 3 fixable vulnerabilities
WordPress JW Player Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)
JW Player 6 Plugin for Wordpress <= 2.1.14 - Authenticated Cross-Site Scripting (XSS)
JW-Player-Plugin-For-Wordpress <= 2.1.14 - Reflected Cross-Site Scripting
WordPress JW Player Plugin <= 2.1.14 - Cross Site Scripting
WordPress JW Player Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)