PLUGIN SECURITY
Is Presto Player safe?
A modern video and audio player for courses, landing pages, marketing, and testimonials — with captions, branding, and page-builder support.
What this plugin does
- Slug:
presto-player - Author: Andre Gagnon
- 100000+ active installs
- 96/100 rating (339 reviews on wordpress.org)
- 4644760 all-time downloads
- On WordPress.org since 2021-02-15
audiovideovideo playervimeoyoutube
Maintenance status
- Latest known version: 4.3.3
- Last updated: 2026-08-27 6:00am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
- Max supported PHP (analyzed): <8.0
Known vulnerabilities
4 known CVEs on file for Presto Player. Reported between 2024 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-9125 | Presto Player [presto-player] < 4.2.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 4.2.1 | 4.2.1 | 2026-06-11 | ✓ fixed in latest |
| CVE-2026-45442 | Presto Player [presto-player] < 4.1.4 | Missing Authorization | Medium 4.3 | < 4.1.4 | 4.1.4 | 2026-05-19 | ✓ fixed in latest |
| CVE-2024-43285 | Presto Player [presto-player] < 3.0.3 | Missing Authorization | Medium 6.3 | < 3.0.3 | 3.0.3 | 2024-08-16 | ✓ fixed in latest |
| CVE-2024-2428 | Presto Player [presto-player] < 2.2.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.7 | < 2.2.3 | 2.2.3 | 2024-03-20 | ✓ fixed in latest |
How to fix it
Keep Presto Player updated — 4.3.3 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Interactive Content – H5P — 40000+ active installs — 96/100 (61) — max PHP 8.4
- Seriously Simple Podcasting — 30000+ active installs — 94/100 (329) — max PHP 8.4
- Advanced WordPress Backgrounds — 30000+ active installs — 96/100 (44) — max PHP 8.4
- Compact WP Audio Player — 20000+ active installs — 82/100 (69) — max PHP 8.4
- WP YouTube Lyte — 20000+ active installs — 96/100 (206)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.