CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor archive
2 CVEs tagged to vendor hdwplayer — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mr. Hdwplayer HDW Player Plugin (Video Player & Video Gallery) allows Reflect…
SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to e…