How many bPlugins html5 video player CVEs are in CISA KEV?

None of bPlugins html5 video player's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of bPlugins html5 video player are affected?

13 distinct bPlugins html5 video player versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in bPlugins html5 video player CVEs?

bPlugins html5 video player's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-787 (Out-of-bounds Write), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

How many critical bPlugins html5 video player vulnerabilities are there?

bPlugins html5 video player has 1 critical and 2 high-severity CVEs.

What is the average severity of bPlugins html5 video player CVEs?

The average CVSS base score across bPlugins html5 video player's scored CVEs is 7.0.

RadicalNotion.AI

Log in Create an account

bPlugins

7 CVEs

bPlugins html5 video player Vulnerabilities

Name: bPlugins html5 video player vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for html5 video player by bPlugins.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

7.0

Avg CVSS

2024–2026

Last updated April 12, 2026

Overview

bPlugins html5 video player has 7 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

Severity and exploitation

How the CVSS severity of bPlugins html5 video player's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of bPlugins html5 video player's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of bPlugins html5 video player's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every bPlugins html5 video player version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.5.191 CVE
< 2.5.251 CVE
< 2.5.271 CVE
< 2.5.311 CVE
< 2.5.331 CVE
< 2.5.351 CVE
1.2.5 <= v <= 1.2.51 CVE

Fixed in

2.5.191 CVE
2.5.251 CVE
2.5.271 CVE
2.5.311 CVE
2.5.331 CVE
2.5.351 CVE

Find a version

7 CVEs

Sort

HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH
CVE-2019-25689
Public exploit
CWE-787
High · CVSS 8.6
EPSS 0.2% (10th pct)2026-04-12
WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability
CVE-2024-43296
Patch
CWE-862
High · CVSS 8.8
EPSS 0.4% (32th pct)2024-11-01
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler
CVE-2024-7727
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.4% (32th pct)2024-09-11
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
CVE-2024-7721
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.3% (22th pct)2024-09-11
Medium vulnerability · 2024-06-20
CVE-2024-5522
Public exploit
Patch
CWE-89
Medium · CVSS 6.5
EPSS 2.6% (85th pct)2024-06-20
Critical vulnerability · 2024-01-30
CVE-2024-1061
Public exploit
Patch
CWE-89
Critical · CVSS 9.8
EPSS 11.1% (96th pct)2024-01-30
Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
CVE-2023-6485
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (43th pct)2024-01-01

Common weakness types

The CWE weakness categories most often found in bPlugins html5 video player CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many bPlugins html5 video player CVEs were published each year.

2024

6

2026

1

Other bPlugins products

Browse vulnerabilities for other products by bPlugins.

B Blocks5 CVEs Button Block5 CVEs Html5 Audio Player5 CVEs bSlider – Create Responsive Image, Post, Product, and Video Sliders4 CVEs document embedder3 CVEs Flash & HTML5 Video3 CVEs HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player3 CVEs HTML5 Video Player – Embed and Play Videos in Custom Player3 CVEs

All bPlugins vulnerabilities

Frequently asked questions

Common questions about bPlugins html5 video player vulnerabilities.

How many CVEs does bPlugins html5 video player have?: bPlugins html5 video player has 7 published CVE records since 2024.
How many bPlugins html5 video player CVEs are in CISA KEV?: None of bPlugins html5 video player's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for bPlugins html5 video player vulnerabilities?: Yes — 4 of bPlugins html5 video player's CVEs have a known public exploit.
Which versions of bPlugins html5 video player are affected?: 13 distinct bPlugins html5 video player versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in bPlugins html5 video player CVEs?: bPlugins html5 video player's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-787 (Out-of-bounds Write), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How many critical bPlugins html5 video player vulnerabilities are there?: bPlugins html5 video player has 1 critical and 2 high-severity CVEs.
What is the average severity of bPlugins html5 video player CVEs?: The average CVSS base score across bPlugins html5 video player's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track bPlugins html5 video player vulnerabilities

Get an alert for each new bPlugins html5 video player CVE, with AI-written analysis and remediation steps.

Create an account See pricing