Easy Video Player

Easy Video Player has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Easy Video Player has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Easy Video Player is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Easy Video Player vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2023-51689

Easy Video Player <= 1.2.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

2 records
Easy Video Player banner
Latestv1.2.2.14

Easy Video Player

Noor Alam

Author

Noor Alam

4.2(57)
84/100
Last Updated
2026-08-23 (20d ago)
Active Installs
20,000+
Downloads
886,129
Requires WP
5.5+
Requires PHP
0+
Tested up to
WP 7.1
Created
2013-04-01 (14y ago)

Easy Video Player is a user-friendly WordPress video plugin to showcase your videos. You can embed both self-hosted videos or videos that are externally hosted using direct links. Easy Video Player Add-ons MediaElement Skin 1 User Only Videos Video Schema Disable Right Click Player Template 1 Easy Video Player Features Embed MP4 video into your website Embed responsive video for a better user experience while viewing from a mobile device Embed HTML5 video which are compatible with major browsers Embed video with poster images Embed video with autoplay if the device and browser support it Embed video with loop Embed video with muted enabled Customize the video player using classes Embed video using MediaElement player Easy Video Player Plugin Usage Embedding a Video in the Classic Editor Settings Configuration It’s pretty easy to set up this video player plugin. Once you have installed the plugin simply navigate to the Settings menu where you will be able to configure some options. Mostly you just to need check the “Enable jQuery” option. That will allow the plugin to make use of jQuery library. Embedding Shortcodes for the Videos Now it’s time to finally embed a video shortcode. To do this create a new post/page and use the following shortcode: [evp_embed_video url="https://example.com/wp-content/uploads/videos/myvid.mp4"] Here, url is a shortcode parameter that you need to replace with the actual URL of the video file. Video Autoplay If you want a particular video to start playing when the page loads, you can set the “autoplay” option to “true”: [evp_embed_video url="https://example.com/wp-content/uploads/videos/myvid.mp4" autoplay="true"] Control Size By default, the player takes up the full width of the content area. You can easily control the size by specifying a width for it: [evp_embed_video url="https://example.com/wp-content/uploads/videos/myvid.mp4" width="640"] The height will be automatically determined based on the ratio (please see the “Control Player Ratio section” for details). Control Player Ratio You can override the default aspect ratio by specifying a different one in the shortcode: [evp_embed_video url="https://example.com/wp-content/uploads/videos/myvid.mp4" ratio="16:9"] If the player does not support your specified aspect ratio it will load the default. Video Loop If you want a particular video to start playing again when it ends, you can set the “loop” option to “true”: [evp_embed_video url="https://example.com/wp-content/uploads/videos/myvid.mp4" loop="true"] Video Player Template If you want to use a different video player template, you can specify it in the “template” parameter: [evp_embed_video url="https://example.com/wp-content/uploads/videos/myvid.mp4" template="mediaelement"] By default, the mediaelement template only loads the “metadata” of a video when the page loads. You can set it to “auto” or “none” with the preload parameter in the shortcode. [evp_embed_video url="https://example.com/wp-content/uploads/videos/myvid.mp4" preload="auto" template="mediaelement"] For detailed documentation please visit the WordPress video plugin page Plugin Language Translation If you are a non-English speaker please help translate Easy Video Player into your language.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C