VdoCipher: Secure Video Player and Hosting
VdoCipher: Secure Video Player and Hosting has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for VdoCipher: Secure Video Player and Hosting has a vendor fix available, so running the current release closes it.
All of these findings were reported by stealthcopter. VdoCipher: Secure Video Player and Hosting is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-47639VdoCipher <= 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

VdoCipher: Secure Video Player and Hosting
Author
Vibhav Sinha
VdoCipher video plugin secure provides video hosting, video playback, and piracy blocker & identification analytics for WordPress websites in the e-learning & media field to help them serve content most securely and smoothly. A combination of Hollywood standard DRMs and viewer-specific watermarking, hacker user id identification ensures that videos can’t be downloaded or shared illegally from your platform. With features like custom smart player, video analytics, and video management suite enables the best viewer and video management experience. We serve 3000+ businesses and 10,000+ content creators’ platforms across 120+ countries. VdoCipher video plugin ensures your videos are secure, smooth, and protected. VdoCipher’s DRM & Watermark Security Features: Video DRM Encryption to prevent illegal video downloads Dynamic Watermarking based on user ID/email ID/IP address to discourage screen capture. In some cases, screen capture is also blocked on browsers, for the rest of the cases, watermark is a good discouragement. Easily customize watermark to change color, transparency, and speed of movement. Domain Restriction. Use a single VdoCipher account to integrate with multiple WordPress websites. Geo, Time, Domain, Authentication Restrictions VdoCipher’s Custom Smart Video Player & Video Hosting Suite Adaptive Streaming based on user internet speed. User can also switch between qualities as per their choice. Quality optimized to ensure playback on slow internet connections, Customizable Video Player: Change color, controls on/off, speed change options. Have different themes for different videos/courses. Add Chapters over the video. Add multilingual subtitles. Video Analytics Amazon AWS Server & CDN Compatible with All Major WordPress LMS & Themes VdoCipher’s plugin works at the WordPress core layer, so playback, DRM security, and per user analytics remain compatible across major LMS and theme stacks. Full plugin and security integration tutorial LMS integrations with step-by-step tutorials: LearnDash LifterLMS Tutor LMS MemberPress LearnPress MasterStudy LMS Sensei LMS See the full list of supported platforms on our LMS Partner page. Easy 15-minute integration Register for VdoCipher trial or paid account. Upload a video and wait for it to complete processing and get ready with encryption. Set up domain restriction from VdoCipher security settings. Install the VdoCipher WordPress plugin. Fill in the API key and other settings like watermark parameters. Use shortcodes to embed in any WordPress page/post/course. Additional Resources Free Trial Signup All VdoCipher Features DRM + Watermark video demo Full Upload + WordPress Embed Tutorial Installation Register for VdoCipher trial or paid account on vdocipher.com Upload a video and wait for it to complete processing and get ready with encryption. Set up domain restriction from VdoCipher “Security & Config” section in VdoCipher dashboard settings. Install VdoCipher WordPress plugin. Fill in the API key and other settings like watermark parameters. Click on the “embed” button below any video in the dashboard. Please choose the “WordPress” section and follow the simple steps. Use simple shortcode to embed in any WordPress page/post/course. Inside a post or page you can write [vdo id="id_of_video"] to embed the video in a post or page. To set width and height use, Example [vdo id="id_of_video" width="600" and height="400"] You can set custom video player themes from “Custom Player” section. It can be set as default theme from the settings page. It is also possible to modify shortcode to use specific theme for specific video embeds. [vdo id="c1480d6f057b70578e7f9d33e" vdo_theme="uz6s6vivib"] Please contact support@vdocipher.com for more queries.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C