CVE-2025-62143
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
The Post Video Players plugin up to version 1.163 contains an exposure of sensitive system information to an unauthorized control sphere vulnerability. It allows retrieving embedded sensitive data.
Risk Assessment
An attacker may gain access to confidential data such as API keys, passwords, or other sensitive information stored in the plugin configuration, potentially leading to further attacks.
Recommendation
Update the Post Video Players plugin to the latest version that includes a security fix, and check whether any sensitive data has been exposed.
Other vulnerabilities in Post Video Players
Original NVD description (English source)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through <= 1.163.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS