FWDesign vulnerabilities
We track 4 vulnerabilities in FWDesign products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2025.
Latest FWDesign vulnerabilities
- 7.2 High severity
Ultimate Video Player: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in FWDesign Ultimate Video Player fwduvp allows Server Side Request Forgery.This issue affects Ultimate Video Player: from n/a through <= 10.1.
- 7.5 High severity
Easy Video Player Wordpress & WooCommerce: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in FWDesign Easy Video Player Wordpress & WooCommerce fwdevp allows Path Traversal.This issue affects Easy Video Player Wordpress & WooCommerce: from n/a through <= 10
- 7.5 High severity
Ultimate Video Player WordPress & WooCommerce…: Improper Limitation of a Pathname to a Restricted Directory
The Ultimate Video Player WordPress & WooCommerce Plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 10.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the
- 7.5 High severity
MP3 Sticky Player: Improper Limitation of a Pathname to a Restricted Directory
The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the s