HV
Product
Html5 Video Player
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 4Low 0
Watch
Add Html5 Video Player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1061 | 9.8 | Jan 30 | The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the 'get_view' function Affected: before 2.5.25 |
| CVE-2024-43296 | 8.8 | Nov 1 | WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability Affected: before 2.5.31 |
| CVE-2024-5522 | 6.5 | Jun 20 | HTML5 Video Player < 2.5.27 - Unauthenticated SQLi Affected: before 2.5.27 |
| CVE-2023-6485 | 5.4 | Jan 1 | Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS Affected: before 2.5.19 |
| CVE-2024-7727 | 5.3 | Sep 11 | HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler Affected: before 2.5.33 |
| CVE-2024-7721 | 4.3 | Sep 11 | HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update Affected: before 2.5.35 |
Showing 6
