Mmetrodw vulnerabilities
We track 2 vulnerabilities in Mmetrodw products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2025.
2vulnerabilities
1critical
1high
0exploited
8.2average CVSS score
Latest Mmetrodw vulnerabilities
- 9.3 Critical severity
tPlayer: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mmetrodw tPlayer tplayer-html5-audio-player-with-playlist allows SQL Injection.This issue affects tPlayer: from n/a through <= 1.2.1.6.
- 7.1 High severity
MMX – Make Me Christmas: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in mmetrodw MMX – Make Me Christmas mmx-make-me-christmas allows Stored XSS.This issue affects MMX – Make Me Christmas: from n/a through <= 1.0.0.