Html5 Video Player
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:html5_video_player:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Html5 Video Player (7d455822-bb4e-5e4f-bdbe-db5c5e49d755) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5522 |
vulnerable | 2026-06-08 06:56:16.243054 |
HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Published: 2024-06-20T06:00:04.044Z
Updated: 2024-08-01T21:18:05.372Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6485 |
vulnerable | 2026-06-08 06:19:47.461942 |
Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against high privilege users like admins
Published: 2024-01-01T14:18:55.845Z
Updated: 2025-06-18T14:58:44.693Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.