Html5 Audio Player vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

HA

Product

Html5 Audio Player

by bPlugins · last CVE Oct 9, 2026

5

CVEs

0

On KEV

6.5

Max CVSS

1

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 0Medium 5Low 0

Severity

All severities5 Critical0 High0 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Html5 Audio Player to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-62039	6.5	0%	Oct 9	WordPress Html5 Audio Player plugin <= 2.8.8 - Cross Site Scripting (XSS) vulnerability Affected: through 2.8.8
CVE-2025-39524	6.5	0%	Apr 16	WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability Affected: through 2.2.28
CVE-2024-37445	5.4	0%	Jul 22	WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability Affected: through 2.2.23
CVE-2023-0170	5.4	1%	Feb 6	Html5 Audio Player < 2.1.12 - Contributor+ Stored XSS Affected: before 2.1.12
CVE-2021-24412	5.4	1%	Oct 18	The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as… Affected: before 2.1.3