Retro Winamp Block

Retro Winamp Block has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Code Injection, behind 1 of the records (33%). Other recurring categories include Inefficient Regular Expression Complexity, Uncontrolled Resource Consumption.

Every one of the 3 issues recorded for Retro Winamp Block has a vendor fix available, so running the current release closes all known holes.

Retro Winamp Block is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Retro Winamp Block vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2022-25860

simple-git < 3.16.0 - Remote Code Execution

Read the full analysis

Vulnerability Records

3 records


2023-02-23 00:00	simple-git < 3.16.0 - Remote Code Execution Retro Winamp Block < 1.3.0	`CVE-2022-25860`	8.1 High	Anonymous	Yes
2022-07-15 00:00	Terser < 4.8.1 and 5.0.0-5.14.1 - Regular Expression Denial of Service Retro Winamp Block <= 1.1.0	`CVE-2022-25858`	5.3 Medium	Anonymous	Yes
2022-07-14 00:00	terser (JS Package) < 5.14.2 - Denial of Service Retro Winamp Block <= 1.1.0	`CVE-2022-25858`	3.7 Low	Anonymous	Yes

Showing 1–3 of 3 reports

Latestv1.3.3

Retro Winamp Block

Author

10up

5.0(1)

100/100

Last Updated

2026-06-23 (3mo ago)

Active Installs

200+

Downloads

8,894

Requires WP

6.6+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2021-11-18 (5y ago)

Do you miss the days of filling up your computer’s harddrive with MP3 files, burning CDs with your favorite party mixes, the glam and grunge fashion styles, waiting every week for the latest episodes of Friends and Sex and the City (sorry, no binging on streaming episodes), and all that came with the 90s? Do you wish the WordPress core blocks offered you more styles to match your interests? Then look no further, because this plugin transforms a bland audio block into a llama-riffic Winamp-stlyed audio block! Disclaimer: Winamp and the Winamp logo are property of Nullsoft Inc. and its owner Radionomy Group (now defunct). This project also leverages the MIT-licensed Webamp player, many thanks to Jordan Eldredge for his efforts there. Changing Player Skins In order to select alternate player skins, browse the Winamp Skin Museum and find a preferred skin, copy the URL of the specific skin (e.g., https://skins.webamp.org/skin/bb0bf8064d108271afea419308dcb6ea/NES_Duck_Hunt.wsz/), and paste that URL in the Skin URL field in the Winamp Block Skin settings.

View on WordPress.org