CVE-2026-62044
Received Received - Intake

Deserialization of Untrusted Data in Super Video Player

Publication date: 2026-10-10

Last updated on: 2026-10-10

Assigner: Patchstack

Description
Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-10
Last Modified
2026-10-10
Generated
2026-10-10
AI Q&A
2026-10-10
EPSS Evaluated
N/A
NVD
CVE-2026-62044
EUVD
EUVD-2026-96374

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
bPlugins Super Video Player 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a PHP Object Injection flaw in the WordPress Super Video Player Plugin (versions up to 1.8.13). It allows attackers to inject malicious objects during deserialization, potentially leading to harmful server actions like data manipulation or code execution.

Detection Guidance

Detecting this vulnerability requires checking if the Super Video Player plugin version 1.8.13 or earlier is installed on a WordPress site. Inspect plugin files for suspicious serialized data handling or unexpected object injection patterns in logs. No specific commands are provided, but monitoring for unusual server activity or unauthorized data processing may indicate exploitation.

Impact Analysis

Attackers could exploit this to manipulate site data processing, leading to unauthorized actions on the server. This may result in data breaches, site defacement, or further compromise of the website or server.

Compliance Impact

This vulnerability could lead to unauthorized data access or manipulation, potentially violating GDPR (data protection) or HIPAA (health data privacy) requirements. Compliance risks include data breaches and failure to protect sensitive user information.

Mitigation Strategies

Immediately apply the mitigation rule provided by Patchstack to block attacks until an official patch is released. Update the plugin to the latest version if available. Alternatively, seek assistance from a hosting provider or developer to implement safeguards. Disable the plugin if not essential to reduce exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-62044. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart