HV
Product
Html5 Video Player
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 4Low 0
Watch
Add Html5 Video Player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1061 | 9.8 | Jan 30 | The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the 'get_view' function Affected: before 2.5.25 |
| CVE-2024-43296 | 8.8 | Nov 1 | Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flash & HTML5… Affected: before 2.5.31 |
| CVE-2024-5522 | 6.5 | Jun 20 | The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated… Affected: before 2.5.27 |
| CVE-2023-6485 | 5.4 | Jan 1 | The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin… Affected: before 2.5.19 |
| CVE-2024-7727 | 5.3 | Sep 11 | The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple… Affected: before 2.5.33 |
| CVE-2024-7721 | 4.3 | Sep 11 | The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the… Affected: before 2.5.35 |
Showing 6
