VMPlayer Security & Risk Analysis
wordpress.org/plugins/vmplayerVMPlayer (Vouscast Media Player) is a popout player specifically designed for Shoutcast and Icecast radio.
Is VMPlayer Safe to Use in 2026?
Generally Safe
Score 85/100VMPlayer has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The "vmplayer" v1.0.1 plugin exhibits a generally good security posture based on the provided static analysis. The absence of dangerous functions, file operations, external HTTP requests, and the proper use of prepared statements for all SQL queries are strong indicators of secure coding practices. All identified output is also properly escaped, mitigating cross-site scripting (XSS) risks. The plugin has no known historical vulnerabilities or CVEs, which further supports its current security standing.
Key Concerns
- No nonces implemented
- Only one capability check found
VMPlayer Security Vulnerabilities
VMPlayer Release Timeline
VMPlayer Code Analysis
SQL Query Safety
Output Escaping
Data Flow Analysis
VMPlayer Attack Surface
Shortcodes 2
WordPress Hooks 5
Maintenance & Trust
VMPlayer Maintenance & Trust
Maintenance Signals
Community Trust
VMPlayer Alternatives
Shoutcast Icecast HTML5 Radio Player
shoutcast-icecast-html5-radio-player
A secure HTML5 radio player for Shoutcast, Icecast, and podcast streams with social sharing.
StreamCast – Live Radio Streaming Player
streamcast
StreamCast allows you to play IceCast, Shoutcast, Radionomy, RadioJar, RadioCo and more beautifully inside WordPress.
WPRadio – WordPress Radio Streaming Plugin
wpradio
An entire radio streaming platform within your WordPress site.
FWD Plasmic Audio Player
fwd-plasmic-audio-player
Powerful and extremely customizable 3D audio player with an organic sphere visualizer, playlist support, and Shoutcast/Icecast playback.
Radio Player Page
radio-player-page
Dedicated player pages for your radio streams, with program scheduling and continuous playback.
VMPlayer Developer Profile
3 plugins · 440 total installs
How We Detect VMPlayer
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/vmplayer/include/assets/css/nr.css/wp-content/plugins/vmplayer/include/assets/css/nr.min.css/wp-content/plugins/vmplayer/include/assets/js/nr.min.js/wp-content/plugins/vmplayer/include/assets/js/nr.min.jsvmplayer/include/assets/js/nr.min.js?ver=1.0.0HTML / DOM Fingerprints
nr-player-containernr-popout-buttondata-vmplayer-stream-urldata-vmplayer-colordata-vmplayer-window-widthdata-vmplayer-window-heightdata-pb-bg-colordata-pb-width+1 morewindow.nr_vmplayer_settings[vmplayer_window][vmplayer_button]