2winfactor - vulnerabilities (CVEs)

2 CVEs in 1 products, 1 in the last 30 days, newest from 2026-10-10.

Products

• Presto Player - 2 CVEs

Newest CVEs of 2winfactor

• CVE-2026-96682 - CVSS 7.2 (high), 2026-10-10: The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via <presto-player> Tag in all versions up to, and…
• CVE-2026-9125 - CVSS 6.4 (medium), 2026-06-12: The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_url' parameter of the [presto_player_overlay] shortcode in…