H5P vulnerabilities
3 published CVEs name H5P among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-112867
WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability
H5P · H5P
Medium6.5 - CVE-2026-112868
WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability
H5P · H5P
Medium4.3 - CVE-2026-56006
WordPress H5P plugin <= 1.17.6 - Reflected Cross Site Scripting (XSS) vulnerability
H5P · H5P
High7.1