CVE-2026-62044: WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability
Published Oct 10, 2026
·Updated
Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13.
Affected Software
1 affected component
bPlugins Super Video Player<=1.8.13
Event History
Oct 10, 2026
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs high privileges. The vulnerability is remotely reachable and requires no user interaction.
2
What versions are affected?
Super Video Player versions through 1.8.13 are affected. The available information does not identify a fixed version.
3
What impact could successful exploitation have?
The vulnerability is rated high severity with high confidentiality, integrity, and availability impact. Successful exploitation could expose data, alter data, or disrupt service.