Html5 Audio Player (Bplugins) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 20 known versions, newest CVE from 2026-10-09. Vendor: Bplugins.

CVEs of Html5 Audio Player

• CVE-2026-62039 - CVSS 6.5 (medium), 2026-10-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player html5-audio-player allows…
• CVE-2025-39524 - CVSS 6.5 (medium), 2025-04-16: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored…
• CVE-2024-37445 - CVSS 6.5 (medium), 2024-07-22: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player allows Stored…
• CVE-2023-0170 - CVSS 5.4 (medium), 2023-02-06: The Html5 Audio Player WordPress plugin before 2.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post…
• CVE-2021-24412 - CVSS 5.4 (medium), 2021-10-18: The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a…