S3 Video Plugin

S3 Video Plugin has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2016; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10. 2013 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (100%).

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2016.

2 independent researchers contributed these findings, most of them (2) reported by Eugene Dokukin.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all S3 Video Plugin vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2016-1000148

S3 Video <= 0.983 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2016-04-12 00:00	S3 Video <= 0.983 - Reflected Cross-Site Scripting S3 Video Plugin <= 0.983	`CVE-2016-1000148`	6.1 Medium	Larry W. Cashdollar	No
2015-05-14 00:00	VideoJS (Various Versions) - Cross-Site Scripting S3 Video Plugin < 0.98	`N/A`	6.1 Medium	Eugene Dokukin	Yes
2013-12-17 00:00	S3 Video <= 0.982 - Cross-Site Scripting S3 Video Plugin <= 0.982	`CVE-2013-7279`	6.1 Medium	Anonymous	Yes
2013-05-15 00:00	S3 Video Plugin < 0.98 - Cross-Site Scripting S3 Video Plugin < 0.98	`N/A`	6.1 Medium	Eugene Dokukin	Yes

Showing 1–4 of 4 reports