Read the docs

bPlugins

Records124All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

bPlugins records in CISA KEV

No bPlugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Html5 Video Player 6 records MEDIUM Button Block 4 records LOW Html5 Audio Player 3 records MEDIUM Icons Font Loader 3 records MEDIUM Document Embedder 2 records LOW Easy Twitter Feed 1 record LOW Pdf Poster 1 record LOW Polo Video Gallery 1 record LOW

Records

3 records in Html5 Audio Player · all components

TI-2023-00164 CVE-2023-0170 · GHSA-2w6h-738h-38w6

Html5 Audio Player < 2.1.12 - Contributor+ Stored XSS

Priority MEDIUM 58

The Html5 Audio Player WordPress plugin before 2.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with th…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00573 Published 2023-02-06 Fixed in 2.1.12
TI-2024-24949 CVE-2024-37445 · GHSA-rwm9-7mg6-8h6c

WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through 2.2.23.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-07-22 No fix listed CWE-79
TI-2021-06704 CVE-2021-24412 · GHSA-cq83-pmg7-mjwj

Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payloa…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2021-10-18 Fixed in 2.1.3 CWE-79
Open these records in search →