Plugin Vulnerability Hub
Plugin 2 known issues Latest disclosed Jan 20, 2013

Ripe HD FLV Vulnerabilities

Review known vulnerability records for the WordPress plugin Ripe HD FLV (`ripe-hd-player`), including severity, CVE references, affected versions, and patch status.

Known Records
2
High or Critical
1
Patch Coverage
100%
Last Updated
Jan 22, 2024
Coverage Snapshot

What this page helps you verify fast

This hub clusters every indexed record for Ripe HD FLV so operators can confirm whether a disclosed issue maps to the installed slug, version range, and patch path.

Patch Visibility
2 records include a published patch path, leaving 0 with no listed safe release yet.
Severity Mix
1 critical and 0 high severity findings.
Recent CVEs
This page still provides patch and version coverage even when a CVE ID is not listed.
Reference Workflow
Jump from the hub into the full report when you need remediation notes, exploit context, CVSS vectors, or source references.
Triage First

Open the records most likely to drive action

These recent records surface the CVE strings, patch cues, and direct report links most operators need first.

Medium No patch listed

Ripe HD FLV <= 1.1 - Full Path Disclosure

The Ripe HD FLV plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 1.1 via the 'index.php' and 'installer.php' files. This can allow unauthentica...

Published
Jan 20, 2013
Patch Status
Not published
Critical No patch listed

Ripe HD FLV <= 1.1 - SQL Injection

The Ripe HD FLV plugin for WordPress is vulnerable to generic SQL Injection via the 'id' parameter in the 'config.php' file in versions up to, and including, 1.1 due to insufficient escaping...

Published
Jan 20, 2013
Patch Status
Not published
Known Vulnerabilities

Reports for Ripe HD FLV

Sorted by latest disclosure date so newly published issues surface first.

Plugin Medium Patched: No
Ripe HD FLV <= 1.1 - Full Path Disclosure

The Ripe HD FLV plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 1.1 via the 'index.php' and 'installer.php' files. This can allow unauthenticated attackers to extract sensitive data including the full path of the installation.

Published
Jan 20, 2013
Patched Release
Not published
Affected Versions
Versions up to 1.1
Next Step
Open the full report for remediation notes and references.
Plugin Critical Patched: No
Ripe HD FLV <= 1.1 - SQL Injection

The Ripe HD FLV plugin for WordPress is vulnerable to generic SQL Injection via the 'id' parameter in the 'config.php' file in versions up to, and including, 1.1 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL que...

Published
Jan 20, 2013
Patched Release
Not published
Affected Versions
Versions up to 1.1
Next Step
Open the full report for remediation notes and references.