Super Video player – Fully Customizable Video Player with Playlist

Super Video player – Fully Customizable Video Player with Playlist has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 2 are fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 6.6 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Deserialization Of Untrusted Data, Missing Authorization.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each. Super Video player – Fully Customizable Video Player with Playlist is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage67%
Open

1

Fixed

2

Get automatic notifications for all Super Video player – Fully Customizable Video Player with Playlist vulnerabilities before they are exploited.

Most severe open issueCVSS 6.6CVE-2026-62044

Super Video player – Fully Customizable Video Player with Playlist <= 1.8.14 - Authenticated (Editor+) PHP Object Injection

Read the full analysis

Vulnerability Records

3 records
Super Video player – Fully Customizable Video Player with Playlist banner
Latestv1.8.15

Super Video player – Fully Customizable Video Player with Playlist

bPlugins

Author

bPlugins

4.2(30)
84/100
Last Updated
2026-10-19 (13h ago)
Active Installs
2,000+
Downloads
96,709
Requires WP
6.5+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2019-01-23 (8y ago)

A no-code video player for self-hosted and streamed video – trusted by 2,000+ websites. Super Video Player | Documentation | Pricing | Support | Demo | Video Tutorial Super Video Player is a lightweight, accessible HTML5 video player for WordPress. Play self-hosted MP4, HLS (.m3u8) and MPEG-DASH (.mpd) video from a Gutenberg block or a shortcode, with playlists, captions and quality switching included in the free version. It is built for sites that host or stream their own video: courses and tutorials, clubs and organisations, product demos, documentation and business sites. What’s free Everything below is included in the free version, with no limit on the number of players. MP4, HLS and MPEG-DASH playback – self-hosted MP4 (H.264/AAC) and adaptive HLS (.m3u8) and DASH (.mpd) streams from one player. Playlists – several videos in one player, in the Default or Horizontal layout, each with its own title, description and poster. Quality switching – add the same video at several resolutions and let viewers choose. Captions and subtitles – add WebVTT files in as many languages as you need, and style the caption text and background. Choose your controls – show or hide the large play button, play, restart, rewind, fast-forward, progress bar, current time, mute, volume, settings (speed and quality) and fullscreen. Controls hide automatically while the video plays. Playback options – autoplay (muted autoplay works in every browser), loop, muted start, click-to-play, tooltips, initial volume and seek time. Playlist titles and descriptions – each playlist video shows its title and description, with typography and colour settings. Styling – player width, border, playlist colours and caption styles. Search engine friendly – every player adds VideoObject structured data so your videos can appear in search results. Accessible – full keyboard control, including choosing playlist videos, with screen-reader labels. Gutenberg block and shortcode – build players in the block editor, or create them once and place them anywhere with [vplayer id="…"], including classic editor content and page builders. Lightweight – a page with a player loads about 170 KB of player assets; a page without one loads none. No jQuery. What Pro adds Vertical and Grid playlist layouts. Continuous playlist playback – the next video starts automatically. Extra controls – captions toggle, share button, picture-in-picture, download button (with an optional custom download URL) and control-bar shadow. Social sharing – a share button that links straight to the video on your page. Global player settings – set your brand colours, custom CSS and translated player text once for every player on the site. Video widget – place a player in any widget area. See Pro pricing – a 7-day free trial is available. Updates keep your players working Players created with older versions keep their videos, settings and controls when you update – nothing needs to be re-saved. Loved by WordPress Users ⭐⭐⭐⭐⭐ So simple to use. Excellent! ❛❛A very neat and efficient way of playing self-hosted videos via WordPress.❜❜ –jonthanr – Did you like this plugin? Dislike it? Have a feature request? Please share your feedback with us Getting Started With the block editor Open any post or page and click +. Search for Super Video Player and add the block. Choose your video, then adjust controls and styling in the block settings. Publish. With a shortcode Go to Super Video Player → Add new Player. Choose your video and configure the player. Copy the shortcode from the All Players list, e.g. [vplayer id="123"]. Paste it into any post, page or widget and publish.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C