Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-112868

WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through 1.17.9.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
H5p Wordpress-extensions
Products
H5p H5p
CVE-2026-56006

WordPress H5P plugin <= 1.17.6 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 versions.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
H5p Wordpress
Products
H5p Wordpress
CVE-2025-68505

WordPress H5P plugin <= 1.16.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through <= 1.16.1.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
H5p Wordpress
Products
H5p Wordpress
CVE-2024-3111

H5P < 1.15.8 - Contributor+ Stored XSS

The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
H5p
Products
H5p