Skip to content
Noroxi

Flash & HTML5 Video

html5-video-player · plugin

Known security vulnerabilities for Flash & HTML5 Video. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

latest Jun 26, 2026

Vulnerabilities

  • CVE-2024-43296

    WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability

    High 8.8

  • CVE-2024-13156

    HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter

    Medium 6.4

  • CVE-2026-57323

    WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability

    Medium 5.8

  • CVE-2024-7727

    HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler

    Medium 5.3

  • CVE-2024-7721

    HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

    Medium 4.3

  • CVE-2024-43319

    WordPress HTML5 Video Player plugin <= 2.5.31 - Sensitive Data Exposure vulnerability

    Medium 4.3

← Back to directory