bplugins html5_video_player vulnerabilities (CVE)

CVE records published for bplugins html5_video_player, newest first. Follow to get an email when a new one appears.

2 results
8.4High
CVE-2019-25689

HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH

Html5Videoplayer HTML5 Video Player

HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field…

6.5Medium
CVE-2024-5522

HTML5 Video Player < 2.5.27 - Unauthenticated SQLi

HTML5 Video Player; bplugins html5_video_player

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks

2.6%EPSS