H5P

Products

ProductCVEsExploitedLatest
H5P3–Oct 22, 2026

Exploited and recent CVEs

  • CVE-2026-112867 Medium 6.5 WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-112868 Medium 4.3 WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-56006 High 7.1 WordPress H5P plugin <= 1.17.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%