Cincopa video and media plug-in · Security record
Is Cincopa video and media plug-in safe?
4 known vulnerabilities affect the current version (1.165), and they have no fix yet.
Checked 2 days ago against the WPVulnerability database, for version 1.165.
How it’s looked after
- Last release
- Jul 28, 2026 (3 months ago)
- Releases in the last year
- 2
- Tested up to
- WordPress 7.0.8
- Active installs
- 1K+
8 known vulnerabilities
- 3 high
- 1 medium
- 4 not rated
4 affect the current version. 4 have no fix yet.
Disclosed each year
- 20152
- 20241
- 20252
- 20262
Every known vulnerability in Cincopa video and media plug-in
Newest first, with any that affect the current version at the top.
Affects the current version · No fix yet · CVE-2026-54864 · Oct 29, 2026 · CVE
Affects the current version · No fix yet · CVE-2026-10092 · Jun 23, 2026 · Wordfence
Affects the current version · No fix yet · CVE-2025-62142 · Dec 31, 2025 · Wordfence
Affects the current version · No fix yet · CVE-2025-62143 · Dec 31, 2025 · Wordfence
Fixed in 1.160 · CVE-2024-23515 · Jan 30, 2024 · Wordfence
Fixed in 1.137 · CVE-2015-10109 · Aug 25, 2015 · Wordfence
Fixed in 1.137 · Aug 25, 2015 · Patchstack
Fixed in 1.137 · WPScan
Questions about Cincopa video and media plug-in’s security
Is Cincopa video and media plug-in safe to use?
Yes: 4 known vulnerabilities affect version 1.165, according to WPVulnerability’s database. Until a fixed version is out, weigh the risk, or switch to an alternative.
Does Cincopa video and media plug-in have known security vulnerabilities?
Yes: 4 known vulnerabilities affect version 1.165, according to WPVulnerability’s database.
Is Cincopa video and media plug-in still maintained?
Yes. Its last release was 3 months ago. No support threads were opened in the last two months.
Is Cincopa video and media plug-in compatible with the latest WordPress?
It’s tested up to WordPress 7.0.8, one version behind the current 7.1. Authors often update this line a few weeks after a release.
Hear about the next one first
Track your plugin on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every plugin updated.