WordPress plugin
HTML5 Video Player – embed fast, responsive videos with ease security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 11 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium10
- Low0
All HTML5 Video Player – embed fast, responsive videos with ease vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.14.1Update to 2.14.2 | CVE-2026-119500 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.14.0Update to 2.14.1 | CVE-2026-118097 | |
| Medium5.3 | Missing Authorization ≤2.11.0Update to 2.11.1 | CVE-2026-57323 | |
| Medium6.4 | Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter ≤2.5.35Update to 2.5.36 | CVE-2024-13156 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Limited Options Update ≤2.5.34Update to 2.5.35 | CVE-2024-7721 | |
| Medium5.3 | Missing Authorization in multiple functions via h5vp_ajax_handler ≤2.5.32Update to 2.5.33 | CVE-2024-7727 | |
| Medium4.3 | Authenticated (Subscriber+) Information Exposure ≤2.5.31Update to 2.5.32 | CVE-2024-43319 | |
| Medium6.4 | Missing Authorization ≤2.5.30Update to 2.5.31 | CVE-2024-43296 | |
| Critical10.0 | Unauthenticated SQL Injection ≤2.5.26Update to 2.5.27 | CVE-2024-5522 | |
| Medium6.5 | Unauthenticated SQL Injection via id ≤2.5.24Update to 2.5.25 | CVE-2024-1061 | |
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤2.5.18Update to 2.5.19 | CVE-2023-6485 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.14.1Update to 2.14.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.14.0Update to 2.14.1
- Medium5.3Missing Authorization
≤2.11.0Update to 2.11.1
- Medium6.4Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter
≤2.5.35Update to 2.5.36
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Limited Options Update
≤2.5.34Update to 2.5.35
- Medium5.3Missing Authorization in multiple functions via h5vp_ajax_handler
≤2.5.32Update to 2.5.33
- Medium4.3Authenticated (Subscriber+) Information Exposure
≤2.5.31Update to 2.5.32
- Medium6.4Missing Authorization
≤2.5.30Update to 2.5.31
- Critical10.0Unauthenticated SQL Injection
≤2.5.26Update to 2.5.27
- Medium6.5Unauthenticated SQL Injection via id
≤2.5.24Update to 2.5.25
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤2.5.18Update to 2.5.19
HTML5 Video Player – embed fast, responsive videos with ease: common questions
Does HTML5 Video Player – embed fast, responsive videos with ease have known vulnerabilities?
Yes. VulnCrest Radar lists 11 known vulnerabilities in HTML5 Video Player – embed fast, responsive videos with ease: 1 critical, 10 medium. None are known to affect version null.
How do I check which version of HTML5 Video Player – embed fast, responsive videos with ease I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent HTML5 Video Player – embed fast, responsive videos with ease vulnerability?
CVE-2026-119500, published Nov 7, 2026: HTML5 Video Player – embed fast, responsive videos with ease <= 2.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any HTML5 Video Player – embed fast, responsive videos with ease vulnerability listed in CISA KEV?
No. None of the known HTML5 Video Player – embed fast, responsive videos with ease vulnerabilities is currently listed in the CISA KEV catalog.