[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftpmZelDicEfpul624rHGblNIYPUl9pnO7Zh_hpiFHqc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":14,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":46,"crawl_stats":37,"alternatives":50,"analysis":151,"fingerprints":199},"hls-player","HLS Player","1.0.11","ROOT SECTOR","https:\u002F\u002Fprofiles.wordpress.org\u002Fr00tsector\u002F","\u003Cp>HLS Player Video Plugin: Streamline your WordPress with the definitive HLS video embedding solution. Powered by the acclaimed Video.js player, this plugin guarantees an exceptional viewing experience.\u003C\u002Fp>\n\u003Cp>Key Features:\u003Cbr \u002F>\n* \u003Cstrong>Effortless Integration\u003C\u002Fstrong>: Embed HLS videos anywhere on your site with ease.\u003Cbr \u002F>\n* \u003Cstrong>Adaptive Design\u003C\u002Fstrong>: Provides a seamless viewing experience on all devices.\u003Cbr \u002F>\n* \u003Cstrong>Universal Compatibility\u003C\u002Fstrong>: Ensures full HTML5 support across all browsers.\u003Cbr \u002F>\n* \u003Cstrong>Visual Appeal:\u003C\u002Fstrong> Customize with video posters for an engaging look.\u003Cbr \u002F>\n* \u003Cstrong>Instant Play\u003C\u002Fstrong>: Auto-playback for immediate engagement.\u003Cbr \u002F>\n* \u003Cstrong>Backup Options\u003C\u002Fstrong>: Embed fallback videos directly from your media library.\u003Cbr \u002F>\n* \u003Cstrong>Simple Installation\u003C\u002Fstrong>: Get started quickly without complex configurations.\u003Cbr \u002F>\n* \u003Cstrong>Performance-Focused\u003C\u002Fstrong>: Lightweight build for fast site performance.\u003Cbr \u002F>\n* \u003Cstrong>Modern Interface\u003C\u002Fstrong>: Enjoy a sleek, watermark-free video player.\u003Cbr \u002F>\n* \u003Cstrong>Versatile Playback\u003C\u002Fstrong>: Supports a range of HTML5 video formats.\u003Cbr \u002F>\n* \u003Cstrong>Accessibility Features\u003C\u002Fstrong>: Include captions and subtitles for a wider audience.\u003Cbr \u002F>\n* \u003Cstrong>Multilingual Support\u003C\u002Fstrong>: Offers captions in various languages.\u003Cbr \u002F>\n* \u003Cstrong>Designed for flexibility\u003C\u002Fstrong>, the WordPress HLS Player Plugin simplifies embedding both local and external .m3u8 or .mpd HLS files. It’s tailored for both responsive and fixed-width layouts, ensuring a straightforward embedding process.\u003C\u002Fp>\n\u003Cp>Elevate your WordPress site with the HLS Player Video Plugin – the pinnacle of professional-grade video streaming.\u003C\u002Fp>\n\u003Ch3>HLS Player Plugin Usage\u003C\u002Fh3>\n\u003Cp>To embed a video, create a new post\u002Fpage and use the following shortcode:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Specify the “url” parameter with the location of the HLS video package file. Supported formats include .m3u8 (application\u002Fx-mpegURL), .mpd (application\u002Fdash+xml), and .mp4 (video\u002Fmp4).\u003C\u002Fp>\n\u003Ch4>Video Shortcode Options\u003C\u002Fh4>\n\u003Ch3>General Options\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>class\u003C\u002Fstrong>: Define the Video.js player’s CSS class (Default: video-js). Additional classes listed at https:\u002F\u002Fvideojs.com\u002Fguides\u002Flayout\u002F#classes\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" class=\"video-js vjs-fluid vjs-16-9\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>width\u003C\u002Fstrong>: Defines the width of the video file.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" width=\"480\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>height\u003C\u002Fstrong>: Defines the height of the video file.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" height=\"264\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>controls\u003C\u002Fstrong>: Specify whether video controls should be displayed (Default: “true”). Use “false” to hide controls. When you disable controls users will not be able to interact with your videos. So It is recommended that you enable autoplay for a video with no controls.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" controls=\"false\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>preload\u003C\u002Fstrong>: Specify how the video should be loaded when the page loads (Default: “auto”). Options include “metadata,” “none,” and “auto.”\u003Cbr \u002F>\n“metadata” – Load only the meta data of the video, which includes information like the duration and dimensions of the video. Sometimes, the meta data will be loaded by downloading a few frames of video.\u003Cbr \u002F>\n“none” – Don’t preload any data. The browser will wait until the user hits “play” to begin downloading.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" preload=\"metadata\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>autoplay\u003C\u002Fstrong>: Cause the video to play automatically when the page loads. Instead of using the autoplay attribute you maybe need to pass an autoplay option to videojs_custom_options_json. https:\u002F\u002Fvideojs.com\u002Fguides\u002Foptions\u002F#autoplay\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" autoplay=\"true\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>loop\u003C\u002Fstrong>: Make the video loop to the beginning when finished and automatically continue playing.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" loop=\"true\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>poster\u003C\u002Fstrong>: Define an image as a placeholder before the video plays.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" poster=\"http:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fposter.jpg\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>muted\u003C\u002Fstrong>: Specify that the audio output of the video should be muted.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" muted=\"true\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>captions\u003C\u002Fstrong>: Add captions or subtitles to the video in multiple languages. Provide the captions in the format:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\"path\u002Fto\u002Fcaptions1.vtt|lang1|label1|default,path\u002Fto\u002Fcaptions2.vtt|lang2|label2\"\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>path\u002Fto\u002Fcaptions: The URL or path to the VTT file containing the subtitles.\u003Cbr \u002F>\nlang: The two-character language code, followed by a hyphen and an optional country code (e.g., en, de, en-US, de-DE).\u003Cbr \u002F>\nlabel: A user-friendly label for the caption (e.g., “English”, “German”).\u003Cbr \u002F>\ndefault: (Optional) Use this keyword to specify which caption should be enabled by default when the video is loaded.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" captions=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fcaptions-en.vtt|en-EN|English|default,https:\u002F\u002Fexample.com\u002Fpath\u002Ftopath\u002Fto\u002Fcaptions-de.vtt|de-de|German\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>videojs_custom_options_json\u003C\u002Fstrong>: JSON format string for custom options (https:\u002F\u002Fvideojs.com\u002Fguides\u002Foptions\u002F) for the video.js player.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" videojs_custom_options_json='{\"autoplay\": \"muted\"}']\nor\n[hls_player url=\"https:\u002F\u002Fexample.com\u002Fpath\u002Fto\u002Fvideo_playlist.m3u8\" videojs_custom_options_json='{\"autoplay\": true,\"liveui\": true,\"liveTracker\": {\"trackingThreshold\": 8}}']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>Get more advanced features with HLS Player PRO\u003C\u002Fh3>\n\u003Ch3>AWS CloudFront Integration\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>=> Global Reach\u003C\u002Fstrong>: Utilize the expansive AWS CloudFront network for low-latency streaming across the globe.\u003Cbr \u002F>\n\u003Cstrong>=> Enhanced Security\u003C\u002Fstrong>: Protect your content with CloudFront Signed Cookies, ensuring that only authorized viewers can access your videos. This feature is particularly useful for preventing unauthorized sharing and downloads, as it ties the video access to specific, signed cookies that are difficult to replicate or redistribute.\u003Cbr \u002F>\n\u003Cstrong>=> Simplified Configuration\u003C\u002Fstrong>: Follow our easy-to-understand instructions to set up CloudFront and implement signed cookies, making your videos secure and your setup hassle-free.\u003C\u002Fp>\n\u003Ch3>AWS Kinesis Video Streams Integration\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>=> Flexible Streaming\u003C\u002Fstrong>: Leverage AWS Kinesis Video Streams for both live and on-demand video streaming.\u003Cbr \u002F>\n\u003Cstrong>=> Direct Downloads\u003C\u002Fstrong>: Enable users to download clips directly from the player, enhancing the viewer experience.\u003C\u002Fp>\n\u003Ch3>Subscription Management\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>=> Integrated Solution\u003C\u002Fstrong>: Combine aMember and WordPress roles for efficient subscription management.\u003Cbr \u002F>\n\u003Cstrong>=> Exclusive Content\u003C\u002Fstrong>: Offer videos exclusively to active subscribers, adding value to your membership packages.\u003C\u002Fp>\n\u003Ch3>Analytics Integration\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>=> In-depth Tracking\u003C\u002Fstrong>: Support for Google Tag Manager and Google Analytics allows you to monitor detailed video statistics.\u003Cbr \u002F>\n\u003Cstrong>=> Viewer Insights\u003C\u002Fstrong>: Gain insights into playback duration and user engagement, helping you to optimize your content strategy.\u003C\u002Fp>\n\u003Ch3>Streaming Optimization\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>=> Effortless Conversion\u003C\u002Fstrong>: Transform .mp4 files into the .m3u8 format with ease, using our tools for Windows or macOS.\u003Cbr \u002F>\n\u003Cstrong>=> Comprehensive Guides\u003C\u002Fstrong>: Benefit from our in-depth guides for video file conversion, AWS S3 and CloudFront configuration and AWS Kinesis Video Stream integration, ensuring a smooth setup process.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fhls-player-pro.root-sector.com\u002F\" rel=\"nofollow ugc\">Check out HLS Player PRO >\u003C\u002Fa>\u003C\u002Fp>\n","HLS Player is a lightweight HTTP Live Streaming player for WordPress, using video.js for easy embedding HLS videos into posts and pages.",600,6126,100,1,"2024-11-26T20:31:00.000Z","6.7.5","6.4","8.1",[20,21,22,23,24],"hls","streaming","video-embedding","video-player","videojs","https:\u002F\u002Fgithub.com\u002Froot-sector\u002Fwordpress-plugin-hls-player-free","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhls-player.1.0.11.zip",91,0,"2024-11-27 20:29:57","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":6,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":29,"updated_date":43,"references":44,"days_to_patch":14},"CVE-2024-11333","hls-player-authenticated-contributor-stored-cross-site-scripting","HLS Player \u003C= 1.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting","The HLS Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hls_player' shortcode in all versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.0.10","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-11-28 09:08:20",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F808695a2-4d34-4b43-88a6-7da788100f2e?source=api-prod",{"slug":47,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":14,"trust_score":48,"computed_at":49},"r00tsector",94,"2026-04-03T21:29:49.495Z",[51,72,90,112,132],{"slug":52,"name":53,"version":54,"author":55,"author_profile":56,"description":57,"short_description":58,"active_installs":59,"downloaded":60,"rating":13,"num_ratings":61,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":65,"tags":66,"homepage":70,"download_link":71,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"castio-live","Castio.live – WordPress Live Streaming (HLS) + Real‑Time Chat","1.1.0","proxymis","https:\u002F\u002Fprofiles.wordpress.org\u002Fproxymis\u002F","\u003Cp>Castio.live is a \u003Cstrong>WordPress live streaming plugin\u003C\u002Fstrong> that lets you \u003Cstrong>go live from your WordPress Admin\u003C\u002Fstrong> using modern browser technologies to generate HLS streams in real time, with built‑in real‑time chat for your audience.\u003C\u002Fp>\n\u003Cp>Unlike traditional live streaming solutions, Castio.live does \u003Cstrong>not require OBS, FFmpeg, RTMP servers, or any third-party streaming platform\u003C\u002Fstrong>. Live streaming and real‑time chat run entirely on your own WordPress server.\u003C\u002Fp>\n\u003Ch3>At a Glance\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Live stream from WordPress Admin (browser HLS)\u003C\u002Fli>\n\u003Cli>Real‑time chat alongside your live stream\u003C\u002Fli>\n\u003Cli>No OBS, no RTMP, no external services\u003C\u002Fli>\n\u003Cli>Auto-generated viewer page with HLS player\u003C\u002Fli>\n\u003Cli>Works on shared hosting, VPS, dedicated servers\u003C\u002Fli>\n\u003Cli>Optional pay‑per‑view and subscriptions via Stripe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Ffgw2u0fmAME?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>👉 \u003Cstrong>Start streaming in minutes\u003C\u002Fstrong>\u003Cbr \u002F>\nInstall the plugin, click “Start Streaming” in WordPress Admin, and instantly share your live viewer page with your audience.\u003C\u002Fp>\n\u003Cp>No streaming SaaS. No vendor lock-in. Full control over your content.\u003C\u002Fp>\n\u003Ch3>Live Streaming from WordPress Admin\u003C\u002Fh3>\n\u003Cp>Castio.live adds a dedicated streaming interface directly inside the WordPress Admin area.\u003C\u002Fp>\n\u003Cp>You can:\u003Cbr \u002F>\n– Select your camera and microphone\u003Cbr \u002F>\n– Preview your stream before going live\u003Cbr \u002F>\n– Start and stop streaming with a single click\u003C\u002Fp>\n\u003Cp>Supported capture technologies:\u003Cbr \u002F>\n– MediaDevices API\u003Cbr \u002F>\n– MediaRecorder\u003Cbr \u002F>\n– WebCodecs (when available, for lower latency)\u003C\u002Fp>\n\u003Cp>Supported streaming browsers:\u003Cbr \u002F>\n– Chrome or Edge (desktop)\u003Cbr \u002F>\n– Chrome (Android)\u003C\u002Fp>\n\u003Cp>Viewer playback works on all modern browsers, including mobile devices.\u003C\u002Fp>\n\u003Ch3>Viewer Page (Auto-Generated)\u003C\u002Fh3>\n\u003Cp>For each live stream, Castio.live can automatically generate a viewer page.\u003C\u002Fp>\n\u003Cp>Viewer page features:\u003Cbr \u002F>\n– HLS video playback (native HLS on Safari, hls.js on other browsers)\u003Cbr \u002F>\n– Clean and lightweight interface\u003Cbr \u002F>\n– Mobile-friendly layout\u003Cbr \u002F>\n– Optional live chat panel\u003C\u002Fp>\n\u003Cp>The viewer page URL can be:\u003Cbr \u002F>\n– Public\u003Cbr \u002F>\n– Shared privately\u003Cbr \u002F>\n– Embedded into other pages\u003Cbr \u002F>\n– Protected via access control options\u003C\u002Fp>\n\u003Ch3>Built-in Real-Time Chat\u003C\u002Fh3>\n\u003Cp>Each live stream includes a built-in real‑time chat system.\u003C\u002Fp>\n\u003Cp>Chat features:\u003Cbr \u002F>\n– AJAX-based live message polling\u003Cbr \u002F>\n– Username display\u003Cbr \u002F>\n– Automatic refresh\u003Cbr \u002F>\n– Message history stored in the WordPress database\u003C\u002Fp>\n\u003Cp>Moderation tools:\u003Cbr \u002F>\n– View all messages\u003Cbr \u002F>\n– Delete individual messages\u003Cbr \u002F>\n– Ban users by username\u003Cbr \u002F>\n– Ban users by IP address\u003C\u002Fp>\n\u003Cp>No external chat service is required.\u003C\u002Fp>\n\u003Ch3>Privacy, Ownership, and Compliance\u003C\u002Fh3>\n\u003Cp>Castio.live is designed with privacy and data ownership as a core principle.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>No third-party streaming services\u003C\u002Fli>\n\u003Cli>No external chat providers\u003C\u002Fli>\n\u003Cli>No analytics or tracking scripts included by default\u003C\u002Fli>\n\u003Cli>No cloud-based video or message processing\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All streaming and chat data remains on your own server:\u003Cbr \u002F>\n– HLS video segments\u003Cbr \u002F>\n– Chat messages\u003Cbr \u002F>\n– Stream metadata\u003Cbr \u002F>\n– Viewer page configuration\u003C\u002Fp>\n\u003Cp>This design helps simplify compliance with GDPR and similar data protection regulations.\u003C\u002Fp>\n\u003Ch3>Technical Architecture\u003C\u002Fh3>\n\u003Cp>Castio.live is a fully WordPress-native plugin.\u003C\u002Fp>\n\u003Cp>No dependencies on:\u003Cbr \u002F>\n– FFmpeg\u003Cbr \u002F>\n– Node.js\u003Cbr \u002F>\n– RTMP servers\u003Cbr \u002F>\n– External streaming APIs\u003C\u002Fp>\n\u003Cp>Core components:\u003Cbr \u002F>\n– Browser-based HLS generation\u003Cbr \u002F>\n– PHP for stream lifecycle and data storage\u003Cbr \u002F>\n– JavaScript for capture, playback, and chat\u003Cbr \u002F>\n– WordPress custom post types and options\u003C\u002Fp>\n\u003Cp>The plugin works on shared hosting, VPS, and dedicated servers.\u003C\u002Fp>\n\u003Ch3>Key Features Summary\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Live stream directly from WordPress Admin\u003C\u002Fli>\n\u003Cli>No OBS, no RTMP, no external streaming platform\u003C\u002Fli>\n\u003Cli>Browser-generated HLS (.m3u8 + .ts)\u003C\u002Fli>\n\u003Cli>Automatic viewer page creation\u003C\u002Fli>\n\u003Cli>Built-in live chat\u003C\u002Fli>\n\u003Cli>Chat moderation tools\u003C\u002Fli>\n\u003Cli>Mobile-friendly viewer experience\u003C\u002Fli>\n\u003Cli>All streaming and chat data stored locally\u003C\u002Fli>\n\u003Cli>Lightweight and efficient\u003C\u002Fli>\n\u003Cli>Compatible with most CDNs, including Cloudflare\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Who Is This Plugin For?\u003C\u002Fh3>\n\u003Cp>Castio.live is ideal for:\u003Cbr \u002F>\n– Educators and online trainers\u003Cbr \u002F>\n– Content creators\u003Cbr \u002F>\n– Community websites\u003Cbr \u002F>\n– Event organizers\u003Cbr \u002F>\n– Developers and agencies\u003Cbr \u002F>\n– Anyone who wants full control over live streaming without SaaS platforms\u003C\u002Fp>\n\u003Ch3>Source Code and Third-Party Libraries\u003C\u002Fh3>\n\u003Cp>This plugin includes both original source code and third-party JavaScript libraries.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Original plugin code\u003C\u002Fstrong>\u003Cbr \u002F>\n– Unminified, human-readable JavaScript files are included directly in the plugin.\u003Cbr \u002F>\n– No obfuscated or encrypted code is used.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Third-party libraries (vendored, unmodified)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>MediaBunny\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>File: \u003Ccode>assets\u002Fjs\u002Fvendor\u002Fmediabunny\u002Fmediabunny.esm.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Source: https:\u002F\u002Fgithub.com\u002FVanilagy\u002Fmediabunny\u003C\u002Fli>\n\u003Cli>License: MIT\u003C\u002Fli>\n\u003Cli>Used for browser-based media processing.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>hls.js\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>File: \u003Ccode>assets\u002Fjs\u002Fvendor\u002Fhls\u002Fhls.min.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Source: https:\u002F\u002Fgithub.com\u002Fvideo-dev\u002Fhls.js\u003C\u002Fli>\n\u003Cli>License: Apache License 2.0\u003C\u002Fli>\n\u003Cli>Used for HLS playback on non-Safari browsers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>These libraries are included for performance and compatibility reasons.\u003Cbr \u002F>\nAll libraries retain their original licenses and copyright notices.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to external third-party services to provide optional monetization and licensing features.\u003C\u002Fp>\n\u003Ch3>Stripe Payments\u003C\u002Fh3>\n\u003Cp>Castio.live can integrate with Stripe to allow site owners to sell access to live or recorded streams, including pay-per-view content and subscriptions.\u003C\u002Fp>\n\u003Cp>What the service is used for:\u003Cbr \u002F>\nStripe is used to create checkout sessions, process payments, manage subscriptions, and retrieve payment reports related to paid video access.\u003C\u002Fp>\n\u003Cp>What data is sent and when:\u003Cbr \u002F>\nWhen a visitor purchases paid content or when the site owner views payment reports, the plugin sends the following data to Stripe:\u003Cbr \u002F>\n– Email address provided during checkout\u003Cbr \u002F>\n– Payment and checkout session identifiers\u003Cbr \u002F>\n– Purchased content or pricing identifiers\u003Cbr \u002F>\n– Subscription and payment status metadata\u003C\u002Fp>\n\u003Cp>No video streams, chat messages, or media content are transmitted to Stripe.\u003C\u002Fp>\n\u003Cp>Service provider:\u003Cbr \u002F>\nStripe, Inc.\u003C\u002Fp>\n\u003Cp>Terms of Service:\u003Cbr \u002F>\nhttps:\u002F\u002Fstripe.com\u002Flegal\u003C\u002Fp>\n\u003Cp>Privacy Policy:\u003Cbr \u002F>\nhttps:\u002F\u002Fstripe.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch3>Castio.live Licensing Server\u003C\u002Fh3>\n\u003Cp>This plugin connects to the Castio.live licensing server to validate premium licenses and enable optional premium features.\u003C\u002Fp>\n\u003Cp>What the service is used for:\u003Cbr \u002F>\nThe licensing server is used to verify license validity and determine which premium features are available.\u003C\u002Fp>\n\u003Cp>What data is sent and when:\u003Cbr \u002F>\nDuring license validation (for example on activation, admin access, or periodic checks), the plugin sends:\u003Cbr \u002F>\n– License key\u003Cbr \u002F>\n– Site domain name\u003Cbr \u002F>\n– Plugin version\u003Cbr \u002F>\n– WordPress version\u003C\u002Fp>\n\u003Cp>No user-generated content, video streams, or personal data are transmitted.\u003C\u002Fp>\n\u003Cp>Service provider:\u003Cbr \u002F>\nCastio.live\u003C\u002Fp>\n\u003Cp>Terms of Service:\u003Cbr \u002F>\nhttps:\u002F\u002Fcastio.live\u002Fterms\u003C\u002Fp>\n\u003Cp>Privacy Policy:\u003Cbr \u002F>\nhttps:\u002F\u002Fcastio.live\u002Fprivacy\u003C\u002Fp>\n\u003Ch3>Demo and Additional Features\u003C\u002Fh3>\n\u003Cp>A public demo, documentation, and optional commercial features are available at:\u003Cbr \u002F>\nhttps:\u002F\u002Fcastio.live\u003C\u002Fp>\n\u003Cp>Commercial offerings may include:\u003Cbr \u002F>\n– Advanced access control\u003Cbr \u002F>\n– Enhanced chat moderation\u003Cbr \u002F>\n– Extended streaming options\u003Cbr \u002F>\n– Priority support\u003C\u002Fp>\n\u003Cp>The core live streaming and chat functionality works without requiring any external service.\u003C\u002Fp>\n\u003Ch3>Author and Support\u003C\u002Fh3>\n\u003Cp>Developed by proxymis\u003Cbr \u002F>\nWebsite: https:\u002F\u002Fproxymis.com\u003Cbr \u002F>\nContact: contact@proxymis.com\u003C\u002Fp>\n","WordPress live streaming via browser-based HLS. Go live from the admin—no OBS, no RTMP, no external services. Auto viewer page with HLS player and bui …",20,232,2,"2026-02-25T09:13:00.000Z","6.9.4","6.2","7.3",[20,67,68,69,23],"live-streaming","live-video","livestream","https:\u002F\u002Fcastio.live","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcastio-live.zip",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":28,"downloaded":80,"rating":28,"num_ratings":28,"last_updated":81,"tested_up_to":63,"requires_at_least":82,"requires_php":83,"tags":84,"homepage":87,"download_link":88,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":89},"zw-player-video-embed","ZW Player Video Embed","2.0","zwplayer","https:\u002F\u002Fprofiles.wordpress.org\u002Fzwplayer\u002F","\u003Cp>ZW Player Video Embed is a professional-grade HTML5 video player supporting all major video formats and streaming protocols.\u003C\u002Fp>\n\u003Cp>Perfect for: live streaming, online courses, video portfolios, surveillance feeds.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Format Support\u003C\u002Fstrong>\u003Cbr \u002F>\n– Codecs: H.264, H.265, AV1, MP3, Opus\u003Cbr \u002F>\n– VOD: HLS, DASH, HTTP-FLV, HTTP-MP4\u003Cbr \u002F>\n– Live: HTTP-FLV, WebSocket-FLV, HLS, DASH, WebRTC, RTSP\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Player Features\u003C\u002Fstrong>\u003Cbr \u002F>\n– Screenshot and video recording\u003Cbr \u002F>\n– Segmented playback\u003Cbr \u002F>\n– Picture-in-picture and mini player\u003Cbr \u002F>\n– Multi-quality switching\u003Cbr \u002F>\n– Speed control\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Integration\u003C\u002Fstrong>\u003Cbr \u002F>\n– Gutenberg block with visual editor\u003Cbr \u002F>\n– Shortcode: [zwplviem url=”video.mp4″]\u003Cbr \u002F>\n– Classic editor button\u003Cbr \u002F>\n– Multiple instances support\u003Cbr \u002F>\n– JSON configuration for advanced setups\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Basic: [zwplviem url=”https:\u002F\u002Fexample.com\u002Fvideo.mp4″]\u003C\u002Fp>\n\u003Cp>Live: [zwplviem url=”live.flv” isLive=”true” autoplay=”true”]\u003C\u002Fp>\n\u003Cp>Full: [zwplviem url=”video.mp4″ poster=”cover.jpg” autoplay=”true” muted=”true” ratio=”16:9″]\u003C\u002Fp>\n\u003Cp>Multi-quality: [zwplviem url=”[{“name”:”HD”,”url”:”hd.mp4″,”default”:true},{“name”:”SD”,”url”:”sd.mp4″}]”]\u003C\u002Fp>\n\u003Ch3>External Services & Third-Party Libraries\u003C\u002Fh3>\n\u003Cp>This plugin includes minified JavaScript libraries for video playback. Below are the sources and licenses for each library:\u003C\u002Fp>\n\u003Ch4>ZWPlayer Core (zwplayer.js)\u003C\u002Fh4>\n\u003Cp>This is the main player library developed by ZW Player Team.\u003Cbr \u002F>\nDocumentation: https:\u002F\u002Fwww.zwplayer.com\u002F\u003Cbr \u002F>\nLicense: Proprietary – The minified zwplayer.js is provided for use within this plugin. Source code is not publicly available.\u003C\u002Fp>\n\u003Ch4>DASH.js (dash.all.min.js)\u003C\u002Fh4>\n\u003Cp>A JavaScript library for playing DASH (Dynamic Adaptive Streaming over HTTP) content.\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002FDash-Industry-Forum\u002Fdash.js\u003Cbr \u002F>\nLicense: BSD-3-Clause\u003Cbr \u002F>\nVersion included: 4.x\u003C\u002Fp>\n\u003Cp>Note: This library may reference XML schemas (schemas.xmlsoap.org) for MPD manifest parsing. No user data is transmitted to external servers during normal playback.\u003C\u002Fp>\n\u003Ch4>HLS.js (hls.min.js, hls.light.min.js)\u003C\u002Fh4>\n\u003Cp>A JavaScript library for playing HLS (HTTP Live Streaming) content in browsers.\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fvideo-dev\u002Fhls.js\u003Cbr \u002F>\nLicense: Apache-2.0\u003Cbr \u002F>\nVersion included: 1.x\u003C\u002Fp>\n\u003Ch4>FLV.js (flv.min.js, flv.live.js)\u003C\u002Fh4>\n\u003Cp>A JavaScript library for playing FLV (Flash Video) content via HTTP-FLV or WebSocket-FLV streaming.\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fbilibili\u002Fflv.js\u003Cbr \u002F>\nLicense: Apache-2.0\u003C\u002Fp>\n\u003Ch4>MPEGTS.js (mpeg.min.js)\u003C\u002Fh4>\n\u003Cp>A JavaScript library for playing MPEG-TS streams.\u003Cbr \u002F>\nSource: https:\u002F\u002Fgithub.com\u002Fxqq\u002Fmpegts.js\u003Cbr \u002F>\nLicense: Apache-2.0\u003C\u002Fp>\n\u003Ch4>Build Tools\u003C\u002Fh4>\n\u003Cp>No build tools are required for this plugin. All JavaScript files are pre-built and included as-is. The libraries above are used directly without additional compilation.\u003C\u002Fp>\n","Professional HTML5 video player supporting HLS, DASH, FLV, MP4, local file with screenshot, recording, PIP and live streaming features.",191,"","5.8","7.0",[85,20,86,67,23],"dash","html5","https:\u002F\u002Fwww.zwplayer.com\u002Fplugin\u002Fwordpress.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzw-player-video-embed.zip","2026-03-15T10:48:56.248Z",{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":98,"downloaded":99,"rating":100,"num_ratings":101,"last_updated":102,"tested_up_to":63,"requires_at_least":103,"requires_php":104,"tags":105,"homepage":110,"download_link":111,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"jetpack-videopress","Jetpack VideoPress","2.8","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Ch3>AD-FREE, CUSTOMIZABLE VIDEO PLAYER FOR WORDPRESS\u003C\u002Fh3>\n\u003Cp>With an immersive design, VideoPress is ideal for videographers, creators, filmmakers, educators, and bloggers seeking to upload high-quality videos with ease.\u003C\u002Fp>\n\u003Ch4>Built for WordPress\u003C\u002Fh4>\n\u003Cp>Take advantage of full integration with the best video hosting plugin created specifically for WordPress. Bring your ideas to the screen and save time by managing your videos in the same interface as your website. You can drag and drop videos directly into WordPress, and manage them in the media library.\u003C\u002Fp>\n\u003Ch4>Ad-free videos offer a better experience\u003C\u002Fh4>\n\u003Cp>Tired of video companies sending your customers to their app to view videos? Or worse, showing inappropriate ads to your site visitors? Our customizable video player for WordPress keeps people on your site so the spotlight is all yours. With VideoPress, you can avoid intrusive ads or imposing player branding.\u003C\u002Fp>\n\u003Ch4>High-quality, lightning-fast video hosting\u003C\u002Fh4>\n\u003Cp>Take the complexity out of self-hosting videos. VideoPress offers fully-hosted videos and a CDN to ensure instant video speed for your audience around the globe. With our powerful and reliable hosting infrastructure, you can provide your audience with fast-motion videos with 60 FPS and full 4K resolution.\u003C\u002Fp>\n\u003Ch4>A complete video experience from the WordPress Editor\u003C\u002Fh4>\n\u003Cp>With the \u003Ca href=\"https:\u002F\u002Fjetpack.com\u002Fsupport\u002Fjetpack-videopress\u002Fadd-video-block-editor\u002F\" rel=\"nofollow ugc\">Jetpack VideoPress Block\u003C\u002Fa>, adding videos to your content has never been easier. This powerful tool lets you effortlessly insert videos straight from the WordPress Editor and comes packed with advanced features like subtitles, captions, chapters, private videos, and poster images.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Adaptive Streaming – Videos play back faster by automatically adjusting video quality based on bandwidth and display size. The viewer can still choose the quality they’d like in the menu.\u003C\u002Fli>\n\u003Cli>Reliable Global Hosting and Video CDN – Built on WordPress.com’s world-class cloud infrastructure, your videos are stored in multiple servers across the globe to ensure quick delivery no matter where your audience is.\u003C\u002Fli>\n\u003Cli>Subtitles, Captions, and Chapters – Simply upload your text tracks via the VideoPress block and they will be available on the video as soon as you publish.\u003C\u002Fli>\n\u003Cli>Progress Bar Color Match – The VideoPress seekbar now adapts its color to match the scenes in your videos. This makes your content really pop.\u003C\u002Fli>\n\u003Cli>Optimized for mobile – Switch between mobile and desktop without missing a beat.\u003C\u002Fli>\n\u003Cli>Picture-in-picture – Pop out the video from the web browser for easier viewing.\u003C\u002Fli>\n\u003Cli>Unlimited Logins – Work with a team? We don’t charge per seat, so everyone that works on your site can have their own login.\u003C\u002Fli>\n\u003Cli>High-Resolution Videos Up to 4K – Watch crisp images on any display and screen size. We’ve added video display for 1440p, 60 FPS, and full 4K resolution.\u003C\u002Fli>\n\u003Cli>Ad-free video – Keep the spotlight on your content, not on ads you can’t control.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Your one-stop solution for video management\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fjetpack.com\u002Fsupport\u002Fjetpack-videopress\u002Fthe-jetpack-videopress-dashboard\u002F\" rel=\"nofollow ugc\">The VideoPress Dashboard\u003C\u002Fa> is a centralized space to upload and manage your video library. Filter your library by rating or privacy setting, view your library in multiple ways, and upload local videos to your Jetpack cloud library.\u003C\u002Fp>\n\u003Ch3>WITH 💚 BY JETPACK\u003C\u002Fh3>\n","The finest video hosting for WordPress. Drag and drop videos through the WordPress editor and keep the focus on your content, not the ads.",7000,137348,80,13,"2026-02-04T14:06:00.000Z","6.8","7.2",[106,107,108,23,109],"cdn","video","video-hosting","video-streaming","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjetpack-videopress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjetpack-videopress.2.8.zip",{"slug":113,"name":114,"version":115,"author":116,"author_profile":117,"description":118,"short_description":119,"active_installs":120,"downloaded":121,"rating":122,"num_ratings":123,"last_updated":124,"tested_up_to":63,"requires_at_least":125,"requires_php":81,"tags":126,"homepage":128,"download_link":129,"security_score":130,"vuln_count":14,"unpatched_count":28,"last_vuln_date":131,"fetched_at":30},"bradmax-player","Bradmax Player","1.1.32","kostalski","https:\u002F\u002Fprofiles.wordpress.org\u002Fkostalski\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fbradmax.com\u002Fsite\u002Fen\u002F\" rel=\"nofollow ugc\">Bradmax Player\u003C\u002Fa> is a plugin, which supports video streams playback on desktops and mobile devices. If you have access to video streaming in formats:\u003Cbr \u002F>\n– HLS\u003Cbr \u002F>\n– MPEG-DASH\u003Cbr \u002F>\n– MS Smooth Streaming\u003Cbr \u002F>\nor simple mp4, webM, ogg files, then you can watch them on your site with Bradmax Player. It is even supporting HLS or MS Smooth Streaming playback on platforms \u002F devices, which\u003Cbr \u002F>\nusually not support them. In such cases video is “transconded” on-fly in your browser during playback.\u003C\u002Fp>\n\u003Cp>Player support also:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>poster image – Custom image from video, which is displayed on player before playback.\u003C\u002Fli>\n\u003Cli>subtitles – Embedded in HLS, MPEG-DASH, MS Smooth Streaming video stream or from external files in SRT, VTT file formats.\u003C\u002Fli>\n\u003Cli>basic video statistics for Google Analytics – Just paste your Google Analytics tracker id into player settings for collecting information about video views and watched time.\u003C\u002Fli>\n\u003Cli>video chapters & time markers – Extending progressbar with additional information about video chapters or time markers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>A self-hosted website running on WordPress CRM.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Bradmax Player Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Embed video streams into a post\u002Fpage or anywhere on your WordPress site (supported streaming formats HLS, MPEG-DASH, MS Smooth Streaming).\u003C\u002Fli>\n\u003Cli>Embed video files (MP4, WebM, Ogg) into your page.\u003C\u002Fli>\n\u003Cli>Embed responsive videos for a better user experience while viewing from a mobile device.\u003C\u002Fli>\n\u003Cli>Embed videos with poster images.\u003C\u002Fli>\n\u003Cli>Automatically play a video when the page is rendered.\u003C\u002Fli>\n\u003Cli>Embed videos uploaded to your WordPress media library using direct links in the shortcode.\u003C\u002Fli>\n\u003Cli>No setup required, simply install and start embedding videos.\u003C\u002Fli>\n\u003Cli>Lightweight and compatible with the latest version of WordPress\u003C\u002Fli>\n\u003Cli>Clean and sleek player with no watermark.\u003C\u002Fli>\n\u003Cli>Player customisation is available (change skin, colors, logo, etc.). It requires only sign-up on https:\u002F\u002Fbradmax.com\u002Fsite\u002Fen\u002Fsignup . It’s free and basic version of player is also free.\u003C\u002Fli>\n\u003Cli>Embed video with subtitles (subtitles loaded from stream or from SRT, VTT files).\u003C\u002Fli>\n\u003Cli>Collect basic statistics about video playback in your Google Analytics account.\u003C\u002Fli>\n\u003Cli>Playback of DRM protected video (only in paid version for custom player downloaded from bradmax.com).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Bradmax Player Plugin Usage\u003C\u002Fh4>\n\u003Cp>In order to embed a video create a new post\u002Fpage and use the following shortcode:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fvideo\u002Ftos\u002Fbig_buck_bunny.m3u8\" duration=\"596\" poster=\"https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fimages\u002Fstartsplash.jpg\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>“url” is the location of your streaming. You need to replace the sample URL with the actual URL of the video stream.\u003C\u002Fli>\n\u003Cli>“duration” contain length in seconds of video, so it can be displayed on player before staring playback.\u003C\u002Fli>\n\u003Cli>“poster” is location of poster image, which should be displayed on player. Replace sample URL with link of your image.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Video playback statistics with Google Analytics\u003C\u002Fh4>\n\u003Cp>Player can collect basic statistics for video playback. You just need to copy your “Tracking ID” from Google Analytics page into player settings.\u003C\u002Fp>\n\u003Cp>For finding “Tracking ID” please open: \u003Ca href=\"https:\u002F\u002Fanalytics.google.com\" rel=\"nofollow ugc\">Google Analytics\u003C\u002Fa> > Admin > Tracking Info > Tracking Code .\u003C\u002Fp>\n\u003Cp>“Tracker ID” is code having form “UA-XXXXXXXX-X”, where X is 0-9 digit and you have to copy it into ga_tracker_id video shortcode option (see section below).\u003C\u002Fp>\n\u003Cp>Player collects video playback details as “Events” in your Google Analytics account. There are available in sections:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Google Analytics panel > Real-Time > Events\u003C\u002Fli>\n\u003Cli>Google Analytics panel > Behaviour > Events\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Player is sending events:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>event category: view , event action: started (send on starting video playback)\u003C\u002Fli>\n\u003Cli>event category: player event, event action: playing\u002Fpaused (send on play\u002Fpause video)\u003C\u002Fli>\n\u003Cli>event category: progress seconds, event action: progress seconds (send every 10 sec of playback)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For each media distinction in statistics you have to specify in video shortcode option “media_id”. Then each event got additionaly “Event Label” with data provided from media_id parameter. media_id can be any text, which you want to define, but it is recomended to keep it short.\u003C\u002Fp>\n\u003Ch4>Video Shortcode Options\u003C\u002Fh4>\n\u003Cp>The following options are supported in the shortcode.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Autoplay\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Causes the video file to automatically play when the page loads.\u003Cbr \u002F>\nNote: Currenlty this option is working only on desktop devices with muted sound (see “Mute” shortcode). On mobile devices (phones, tablets, etc.) this option is not working.\u003Cbr \u002F>\nIt is platform limitation and clicking on video is required for starting playback.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_stream.m3u8\" autoplay=\"true\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Mute\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Causes the video starts with muted sound. This option is usefull for starting video automatically with “autoplay” option.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_stream.m3u8\" autoplay=\"true\" mute=\"true\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Duration\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Defines length of video stream in seconds. Can contain fraction of second. It is required for displaying duration of video before staring playback.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_stream.m3u8\" duration=\"100.1\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Poster\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Defines image to show as placeholder before the video plays.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_stream.m3u8\" poster=\"http:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fposter.jpg\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Pip\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Enables additional button in player skin for enabling\u002Fdisabling Picture-in-Picture mode. When PIP mode is enabled then player is detached from browser and user can watch video over other screens.\u003Cbr \u002F>\nNote: This feature requires player at last v2.12.0 version. If you are using older customized player (changed colors, skin, etc.), then you have to generate new one on bradmax.com page.\u003Cbr \u002F>\nPIP button appears after starting playback. Before it is blocked by browser.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_stream.m3u8\" pip=\"true\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Chapters & Time markers\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Defines additional info for video chapters. Such information will be presented on progress bar. Format for video chapters is similar to Youtube chapters in description.\u003Cbr \u002F>\nEach chapter entry should be in separated line or separated from other entries using semicolon (;). Entry begins with start time of chapter and folowed by label for chapter.\u003Cbr \u002F>\nChapters use “chapters” attribute name and time markers “time_markers”.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fvideo\u002Ftos\u002F440272.mpd\" duration=\"100.1\" chapters=\"\n0:00 - Intro\n0:23 - 1. Preparations\n3:18 - 2. Simulation\n7:18 - 3. Defense\n8:48 - 4. Forgiveness\n9:38 - Credits\n\"\ntime_markers=\"\n 1:40 - Decoy\n 3:20 - Simulation start \n 5:30 - They are comming ...\n 8:08 - Rope slide\n11:14 - Credits rope slide\n\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Example for semicolons instead of new lines – all in one line. Sometimes wordpress can have problems with multiline in shortcodes. Using semicolons will solve it.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fvideo\u002Ftos\u002F440272.mpd\" duration=\"100.1\" chapters=\"0:00 - Intro ; 0:23 - 1. Preparations ; 3:18 - 2. Simulation ;7:18 - 3. Defense ; 8:48 - 4. Forgiveness ; 9:38 - Credits\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Class\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Defines CSS class, which should be added into player box on page (customizing view on WordPress page).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_stream.m3u8\" class=\"my-custom-player-css-class\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Style\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Defines CSS style string, which should be added into player for on page (customizing view on WordPress page).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_stream.m3u8\" style=\"width:400px;height:200px;border:solid 1px gray\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Subtitles\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Defines list of subtitles files (one file per language) for video. Subtitles files has to be in SRT or VTT format (file extension *.srt or *.vtt). Format for subtitles list subtitles=”LANG_CODE=FILE_LINK LANG_CODE=FILE_LINK …”, where LANG_CODE is two letter language code (ISO 639-1 standard – https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FList_of_ISO_639-1_codes) for defining subtitles language. FILE_LINK is link to file stored on some HTTP server, which player will be able to download during playback.\u003C\u002Fp>\n\u003Cp>Working example (subtitles in Czech language):\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fvideo\u002Ftos\u002Ftesla\u002Ftesla.m3u8\" subtitles=\"cz=https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fvideo\u002Ftos\u002Ftesla\u002Ftesla_cz.srt\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Example with multiple languages for video:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_stream.m3u8\" subtitles=\"en=https:\u002F\u002Fexample.com\u002Fsubtitles_en.srt cz=https:\u002F\u002Fexample.com\u002Fsubtitles_cz.srt sk=https:\u002F\u002Fexample.com\u002Fsubtitles_sk.srt\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>ga_tracker_id\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Defines Google Analytics tracker id. When defined video playback is tracked in your Google Analytics account in “Events” sections.\u003C\u002Fp>\n\u003Cp>“Tracker ID” is code having form “UA-XXXXXXXX-X”, where X is 0-9 digit and is located in \u003Ca href=\"https:\u002F\u002Fanalytics.google.com\" rel=\"nofollow ugc\">Google Analytics\u003C\u002Fa> > Admin > Tracking Info > Tracking Code.\u003C\u002Fp>\n\u003Cp>Example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_stream.m3u8\" ga_tracker_id=\"UA-XXXXXXXX-X\" media_id=\"my example stream\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>media_id\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This parameter is used, when Google Analytics plugin is active (see ga_tracker_id video shortcode). It is used for each media distinction, so for each different video diferent value should be provided. It can be any text, but it is recomended to keep it short.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Alternative stream formats (url_2, url_3, url_4)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you got video content (same title\u002Fmedia) in multiple formats eg. MPEG-DASH, HLS, MS Smooth Streaming you can provide them to player using shortcodes url_2, url_3, url_4 . Player automatically choses format with best support for device. You can put links in any order.\u003C\u002Fp>\n\u003Cp>Example for video with many formats (MPEG-DASH and HLS):\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fvideo\u002Ftos\u002F440272.mpd\" url_2=\"https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fvideo\u002Ftos\u002F440272.m3u8\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>live_\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Player supports playback for live stream transmissions (HLS, MPEG-DASH, MS Smooth Streaming). For such transmissions are additonal parameters, which improve user experience.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>live_end_date: Date time as ISO 8601 string (https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FISO_8601). Examples: “2020-06-10T20:00:00Z” (2020-06-10 20:00:00 UTC time zone), “2020-06-12T18:00:00+08:00” (2020-06-12 18:00:00 GMT+8 time zone). If defined, then player is able to detect end of live stream transmission. Without it player will be assume end of transmission and end splash screen will be presented.\u003C\u002Fli>\n\u003Cli>live_thank_you_image_url: Link to custom end splash image, which should be shown after end of live stream transmission. If not defined then default start splash will be shown after end of transmission.\u003C\u002Fli>\n\u003Cli>live_waiting_for_transmission_image_url: Link to custom waiting for transmission image, which should be shown when player is waiting for live stream transmission start. Requires live_end_date parameter for correct work – player is aware if it is before or after transmission.\u003C\u002Fli>\n\u003Cli>live_low_latency_mode: Indicates if lowLatencyMode should be enabled. By default it is disabled. When live_low_latency_mode then latency optimization is used at the expense of quality (stream is in lower quality and can buffer more frequently, but with much lower latency). This mode is working only for HLS and MPEG-DASH streams. example configuration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Examples:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_live_stream.m3u8\" live_waiting_for_transmission_image_url=\"https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fimages\u002Fwaiting_for_transmission.jpg\" live_thank_you_image_url=\"https:\u002F\u002Fbradmax.com\u002Fstatic\u002Fimages\u002Fthankyou_endsplash.jpg\" live_end_date=\"2020-06-14T14:00:00+08:00\"]\n\n[bradmax_video url=\"http:\u002F\u002Fexample.com\u002Fhls_live_stream.m3u8\" live_low_latency_mode=\"true\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>drm_\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Player supports playback for DRM protected video – paid version of player downloaded from bradmax.com is required. Short codes for DRM configuration:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>drm_prov: Type of provider. Mark “default” for enabling support DRMs for selected content. Available values: [‘default’, ‘ezdrm’, ‘keyos’]\u003C\u002Fli>\n\u003Cli>drm_widevine_url: URL to Widevine DRM license server. It is required for decrypting Widevine protected videos.\u003C\u002Fli>\n\u003Cli>drm_widevine_cust_data: Custom data in base64 encoded format for Widevine.\u003C\u002Fli>\n\u003Cli>drm_playready_url: URL to MS PlayReady DRM license server. It is required for decrypting PlayReady protected videos.\u003C\u002Fli>\n\u003Cli>drm_playready_cust_data: Custom data in base64 encoded format for MS PlayReady.\u003C\u002Fli>\n\u003Cli>drm_fairplay_url: URL to FairPlay DRM license server. It is required for decrypting FairPlay protected videos.\u003C\u002Fli>\n\u003Cli>drm_fairplay_cust_data: Custom data in base64 encoded format for FairPlay.\u003C\u002Fli>\n\u003Cli>drm_fairplay_cert_url: URL to FairPlay certificate server.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[bradmax_video url=\"https:\u002F\u002Fexample.com\u002Fdrm_protected_stream.mpd\" drm_prov=\"default\" drm_widevine_url=\"https:\u002F\u002Fdrm.example.com\u002Flicense\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Embed video stream easily in WordPress using Bradmax Player. Use responsive HTML5 video player for playing HLS, MPEG-DASH, MSS streams.",1000,71505,86,11,"2026-03-06T10:11:00.000Z","4.2",[20,86,127,107,109],"mpeg-dash","https:\u002F\u002Fbradmax.com\u002Fsite\u002Fen\u002F#contact","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbradmax-player.1.1.32.zip",99,"2024-07-10 00:00:00",{"slug":133,"name":134,"version":135,"author":134,"author_profile":136,"description":137,"short_description":138,"active_installs":120,"downloaded":139,"rating":13,"num_ratings":140,"last_updated":141,"tested_up_to":16,"requires_at_least":142,"requires_php":143,"tags":144,"homepage":147,"download_link":148,"security_score":149,"vuln_count":61,"unpatched_count":14,"last_vuln_date":150,"fetched_at":30},"playerjs","PlayerJS","2.24","https:\u002F\u002Fprofiles.wordpress.org\u002Fplayerjs\u002F","\u003Cp>Build custom video \u002F audio player on \u003Ca href=\"https:\u002F\u002Fplayerjs.com\" rel=\"nofollow ugc\">PlayerJS.com\u003C\u002Fa> for FREE and place it on your website.\u003C\u002Fp>\n","The official plugin for PlayerJS.com - video & audio player builder. Make an awesome player for your website for free.",22829,5,"2025-02-25T16:02:00.000Z","4.6","5.2.4",[145,4,146,133,23],"audio-player","html5-player","https:\u002F\u002Fplayerjs.com\u002Fdocs\u002Fq=wordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fplayerjs.2.24.zip",69,"2025-09-22 00:00:00",{"attackSurface":152,"codeSignals":179,"taintFlows":187,"riskAssessment":188,"analyzedAt":198},{"hooks":153,"ajaxHandlers":171,"restRoutes":172,"shortcodes":173,"cronEvents":178,"entryPointCount":14,"unprotectedCount":28},[154,160,165,168],{"type":155,"name":156,"callback":157,"file":158,"line":159},"action","wp_enqueue_scripts","enqueue_scripts_and_styles","hls-player.php",30,{"type":161,"name":162,"callback":163,"file":158,"line":164},"filter","widget_text","do_shortcode",34,{"type":161,"name":166,"callback":163,"priority":123,"file":158,"line":167},"the_excerpt",35,{"type":161,"name":169,"callback":163,"priority":123,"file":158,"line":170},"the_content",36,[],[],[174],{"tag":175,"callback":176,"file":158,"line":177},"hls_player","hls_player_shortcode",33,[],{"dangerousFunctions":180,"sqlUsage":181,"outputEscaping":183,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":186},[],{"prepared":28,"raw":28,"locations":182},[],{"escaped":184,"rawEcho":28,"locations":185},6,[],[],[],{"summary":189,"deductions":190},"The hls-player plugin version 1.0.11 demonstrates a generally strong security posture based on the static analysis.  The absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and proper output escaping across all identified outputs are significant positive indicators. Furthermore, the lack of external HTTP requests and file operations reduces the potential attack surface.  However, the analysis reveals a concerning lack of capability checks and nonce checks, particularly for its single shortcode entry point. This creates a potential avenue for privilege escalation or unauthorized execution if the shortcode is not properly secured by the calling context.\n\nThe vulnerability history shows one known CVE, which is marked as patched. While this is positive, the fact that it was a Cross-site Scripting (XSS) vulnerability, and the timing (2024-11-27), suggests that the plugin has had past security flaws. The absence of critical or high severity vulnerabilities in the history is encouraging, but the presence of a medium severity XSS highlights the importance of ongoing vigilance and robust input validation, especially given the identified lack of specific security checks in the code.\n\nIn conclusion, while the plugin employs good practices like prepared statements and proper output escaping, the lack of explicit nonce and capability checks on its shortcode represents a notable weakness. This, combined with the past XSS vulnerability, warrants careful consideration. Users should ensure that the shortcode is only used in contexts where its input can be trusted and that appropriate WordPress security best practices are followed to mitigate any residual risk.",[191,194,196],{"reason":192,"points":193},"Missing capability checks on shortcode",10,{"reason":195,"points":193},"Missing nonce checks on shortcode",{"reason":197,"points":140},"Past medium severity XSS vulnerability","2026-03-16T19:28:29.572Z",{"wat":200,"direct":214},{"assetPaths":201,"generatorPatterns":205,"scriptPaths":206,"versionParams":210},[202,203,204],"\u002Fwp-content\u002Fplugins\u002Fhls-player\u002Fpublic\u002Fjs\u002Fvideo.min.js","\u002Fwp-content\u002Fplugins\u002Fhls-player\u002Fpublic\u002Fcss\u002Fvideo-js.min.css","\u002Fwp-content\u002Fplugins\u002Fhls-player\u002Fpublic\u002Fjs\u002Fhls-player.min.js",[],[207,208,209],"public\u002Fjs\u002Fvideo.min.js","public\u002Fcss\u002Fvideo-js.min.css","public\u002Fjs\u002Fhls-player.min.js",[211,212,213],"hls-player\u002Fpublic\u002Fjs\u002Fvideo.min.js?ver=","hls-player\u002Fpublic\u002Fcss\u002Fvideo-js.min.css?ver=","hls-player\u002Fpublic\u002Fjs\u002Fhls-player.min.js?ver=",{"cssClasses":215,"htmlComments":217,"htmlAttributes":218,"restEndpoints":220,"jsGlobals":221,"shortcodeOutput":223},[216],"vjs-fluid",[],[219],"data-setup",[],[222],"hlsPlayerData_",[224,225,226,227,228,229,230,231,232,233],"\u003Cvideo id=\"","class=\"video-js vjs-fluid\"","controls","preload=\"auto\"","autoplay","loop","muted","poster=\"","width=\"","height=\""]