CVE-2026-93512

The vulnerability affects JW Player for WordPress versions up to 2.3.11, allowing unauthenticated attackers to execute arbitrary JavaScript in the context of the affected site through Cross Site Scripting (XSS). This can lead to session hijacking, defacement, or other malicious activities that compromise user data and site integrity. WordPress site administrators using this plugin should prioritize patching to mitigate potential exploitation risks.