H5P

h5p · plugin

Known security vulnerabilities for H5P. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

latest Jun 26, 2026

Vulnerabilities

CVE-2026-57321
WordPress H5P plugin <= 1.17.7 - Arbitrary File Deletion vulnerability
High 7.1
CVE-2026-56006
WordPress H5P plugin <= 1.17.6 - Reflected Cross Site Scripting (XSS) vulnerability
High 7.1
CVE-2025-62951
WordPress H5P plugin <= 1.16.0 - Cross Site Scripting (XSS) vulnerability
Medium 6.5
CVE-2025-68505
WordPress H5P plugin <= 1.16.1 - Broken Access Control vulnerability
Medium 5.3