plugin

Pay Per Media Player Vulnerabilities

1 known security issue reported for the Pay Per Media Player WordPress plugin. Most recent disclosed May 25, 2014.

1 medium

Running Pay Per Media Player on your site? Check whether your installed version is affected.

Scan your site free

Pay Per Media Player <= 1.24 - Cross-Site Scripting

medium

Multiple cross-site scripting (XSS) vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) fcolor, (2) links, (3) stitle, (4) height, (5) width, (6) host, (7) bcolor, (8) msg, (9) id, or (10) size p...

CVSS:
6.1
Affected:
up to 1.24
Fix:
No patched version reported
Disclosed:
May 25, 2014

CVE-2014-4543 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database