What’s Vulnerable › Products

bplugins HTML5 Video Player – Embed and Play Videos in Custom Player vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your bplugins HTML5 Video Player – Embed and Play Videos in Custom Player version is affected

Latest bplugins HTML5 Video Player – Embed and Play Videos in Custom Player vulnerabilities

• CVE-2024-13156 — HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter (CVSS 6.4)
• CVE-2024-43296 — WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-7727 — HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler (CVSS 5.3)
• CVE-2024-7721 — HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (CVSS 4.3)
• CVE-2024-43319 — WordPress HTML5 Video Player plugin <= 2.5.31 - Sensitive Data Exposure vulnerability (CVSS 4.3)
• CVE-2024-5522 — HTML5 Video Player < 2.5.27 - Unauthenticated SQLi (CVSS 6.5)
• CVE-2024-1061 — (CVSS 9.8)
• CVE-2023-6485 — Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS (CVSS 5.4)