CVE-2024-10804: Fwdesign Ultimate Video Player WordPress & Woocommerce Plugin

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The Ultimate Video Player WordPress & WooCommerce Plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 10.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

Affected products

• Fwdesign Ultimate Video Player WordPress & Woocommerce Plugin: up to and including 10.0

Published 2025-03-07. Last modified 2026-06-17.