H5
Product
H5P
4
CVEs
0
On KEV
7.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add H5P to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-112867 New | 6.5 | Oct 22 | WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability Affected: through 1.17.9 |
| CVE-2024-3111 | 5.4 | Jun 27 | The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored… Affected: before 1.15.8 |
| CVE-2026-112868 | 4.3 | Oct 21 | WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability Affected: through 1.17.9 |
Showing 3