Read the docs

icc0rz

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

icc0rz records in CISA KEV

No icc0rz vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-42026 CVE-2025-68505 · GHSA-938x-vjmp-c2cw

WordPress H5P plugin <= 1.16.1 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through <= 1.16.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00296 Published 2025-12-24 No fix listed CWE-862
TI-2025-39099 CVE-2025-62951 · GHSA-6mmq-g487-46w7

WordPress H5P plugin <= 1.16.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icc0rz H5P h5p allows Stored XSS.This issue affects H5P: from n/a through <= 1.16.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00204 Published 2025-10-27 No fix listed CWE-79
Open these records in search →