H5P

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:icc0rz:h5p:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIcc0Rz (a1db8cf7-5c5e-5476-92a2-3031cff81181)
ProductH5P (060ed535-3104-5dbe-9588-6890a19e161b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57321 vulnerable 2026-07-29 01:00:29.599222 WordPress H5P plugin <= 1.17.7 - Arbitrary File Deletion vulnerability
HIGH (7.1)
Contributor Arbitrary File Deletion in H5P <= 1.17.7 versions.
Published: 2026-06-26T14:53:00.676Z
Updated: 2026-06-29T15:01:00.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68505 vulnerable 2026-06-08 07:41:21.319656 WordPress H5P plugin <= 1.16.1 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through <= 1.16.1.
Published: 2025-12-24T12:31:20.714Z
Updated: 2026-04-28T16:14:29.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62951 vulnerable 2026-06-08 07:39:17.068276 WordPress H5P plugin <= 1.16.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icc0rz H5P h5p allows Stored XSS.This issue affects H5P: from n/a through <= 1.16.0.
Published: 2025-10-27T01:34:09.049Z
Updated: 2026-04-28T18:58:05.674Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.