All 5 CVE vulnerabilities found in H5P, with AI-generated Chinese analysis, references, and POCs.
Vendor: icc0rz
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-112868 | WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability CWE-639 | 4.3 | Medium | 2026-10-21 |
| CVE-2026-57321 | WordPress H5P plugin <= 1.17.7 - Arbitrary File Deletion vulnerability CWE-22 | 7.1 | High | 2026-06-26 |
| CVE-2026-56006 | WordPress H5P plugin <= 1.17.6 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2026-06-25 |
| CVE-2025-68505 | WordPress H5P plugin <= 1.16.1 - Broken Access Control vulnerability CWE-862 | 5.3 | Medium | 2025-12-24 |
| CVE-2025-62951 | WordPress H5P plugin <= 1.16.0 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2025-10-27 |
All 5 known CVE vulnerabilities affecting H5P with full Chinese analysis, references, and POCs where available.