Plugin icon

HTML5 Video Player – Embed and Play Videos in Custom Player

html5-video-player

Vulnerabilities:

8

Last Updated:

June 16, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2025-01-13
Title
HTML5 Video Player – mp4 Video Player Plugin and Block < 2.5.36 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter
Fixed in
Fixed in 2.5.36
CVSS
6.4 (medium)
Published
2024-09-10
Title
HTML5 Video Player – mp4 Video Player Plugin and Block < 2.5.35 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Fixed in
Fixed in 2.5.35
CVSS
4.3 (medium)
Published
2024-09-10
Title
HTML5 Video Player – mp4 Video Player Plugin and Block < 2.5.33 - Missing Authorization in multiple functions via h5vp_ajax_handler
Fixed in
Fixed in 2.5.33
CVSS
5.3 (medium)
Published
2024-08-16
Title
Flash & HTML5 Video < 2.5.32 - Authenticated (Subscriber+) Information Exposure
Fixed in
Fixed in 2.5.32
CVSS
4.3 (medium)
Published
2024-08-16
Title
Flash & HTML5 Video < 2.5.31 - Missing Authorization
Fixed in
Fixed in 2.5.31
CVSS
6.4 (medium)
Published
2024-05-30
Title
HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
Fixed in
Fixed in 2.5.27
CVSS
8.6 (high)
Published
2024-01-30
Title
HTML5 Video Player < 2.5.25 - Unauthenticated SQLi
Fixed in
Fixed in 2.5.25
CVSS
8.6 (high)
Published
2023-12-08
Title
Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
Fixed in
Fixed in 2.5.19
CVSS
8.0 (high)