Does VMPlayer have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is VMPlayer compatible with WordPress 7.0.2?

According to WordPress.org data, VMPlayer 1.1.5 has been tested up to WordPress 7.0.2. Check the plugin's changelog for the latest compatibility information.

Is VMPlayer compatible with PHP 7.4+?

VMPlayer requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is VMPlayer updated?

VMPlayer was last updated on Jul 10, 2026. Frequent updates are generally a positive security signal.

What is VMPlayer's security score?

VMPlayer has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

VMPlayer Security & Risk Analysis

wordpress.org/plugins/vmplayer

A modern streaming radio player for WordPress with Shoutcast, Icecast, HLS, and direct stream support.

30 active installs v1.1.5 PHP 7.4+ WP 5.8+ Updated Jul 10, 2026

hlsicecastradioshoutcaststreaming

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is VMPlayer Safe to Use in 2026?

Generally Safe

Score 100/100

VMPlayer has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago

Risk Assessment

The "vmplayer" v1.0.1 plugin exhibits a generally good security posture based on the provided static analysis. The absence of dangerous functions, file operations, external HTTP requests, and the proper use of prepared statements for all SQL queries are strong indicators of secure coding practices. All identified output is also properly escaped, mitigating cross-site scripting (XSS) risks. The plugin has no known historical vulnerabilities or CVEs, which further supports its current security standing.

Key Concerns

No nonces implemented
Only one capability check found

Vulnerabilities

None known

VMPlayer Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

VMPlayer Release Timeline

v1.1.5Current

v1.1.4

v1.1.3

v1.1.2

v1.0.2

v1.0.1

v1.0.0

Code Analysis

Analyzed Mar 16, 2026

VMPlayer Code Analysis

Dangerous Functions

Raw SQL Queries

2 prepared

Unescaped Output

48 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared2 total queries

Output Escaping

100% escaped48 total outputs

Data Flows · Security

All sanitized

Data Flow Analysis

2 flows

nr_vmplayer_register_setings (vmplayer.php:83)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

VMPlayer Attack Surface

Entry Points2

Unprotected0

Shortcodes 2

[vmplayer_window] include\shortcode.php:5

[vmplayer_button] include\shortcode.php:10

WordPress Hooks 5

actioninitinclude\shortcode.php:15

actionadmin_enqueue_scriptsvmplayer.php:28

actionwp_enqueue_scriptsvmplayer.php:29

actionadmin_menuvmplayer.php:30

actionadmin_menuvmplayer.php:31

Maintenance & Trust

VMPlayer Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2

Last updatedJul 10, 2026

PHP min version7.4

Downloads3K

Community Trust

Rating0/100

Number of ratings0

Active installs30

Alternatives

VMPlayer Alternatives

WPRadio – WordPress Radio Streaming Plugin

wpradio

An entire radio streaming platform within your WordPress site.

200 1 CVE

Heimatradio Footer Radio Player

heimatradio-footer-player

100

A modern sticky footer radio player for WordPress with Shoutcast and Icecast support.

0 No CVEs

Shoutcast Icecast HTML5 Radio Player

shoutcast-icecast-html5-radio-player

A secure HTML5 radio player for Shoutcast, Icecast, and podcast streams with social sharing.

1K 1 CVE

StreamCast – Live Radio Streaming Player

streamcast

StreamCast allows you to play IceCast, Shoutcast, Radionomy, RadioJar, RadioCo and more beautifully inside WordPress.

1K 2 CVEs

Radio Player Page

radio-player-page

100

Dedicated player pages for your radio stations, with scheduling and continuous playback.

200 No CVEs

Developer Profile

VMPlayer Developer Profile

ganddser

3 plugins · 540 total installs

trust score

Avg Security Score

98/100

Avg Patch Time

673 days

View full developer profile

Detection Fingerprints

How We Detect VMPlayer

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/vmplayer/include/assets/css/nr.css/wp-content/plugins/vmplayer/include/assets/css/nr.min.css/wp-content/plugins/vmplayer/include/assets/js/nr.min.js

Script Paths

/wp-content/plugins/vmplayer/include/assets/js/nr.min.js

Version Parameters

vmplayer/include/assets/js/nr.min.js?ver=1.0.0

HTML / DOM Fingerprints

CSS Classes

nr-player-containernr-popout-button

Data Attributes

data-vmplayer-stream-urldata-vmplayer-colordata-vmplayer-window-widthdata-vmplayer-window-heightdata-pb-bg-colordata-pb-width+1 more

JS Globals

window.nr_vmplayer_settings

Shortcode Output

[vmplayer_window][vmplayer_button]

FAQ