Advisories · Technology
bplugins HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player.
Every CVE that names bplugins HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery
- bplugins HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
HTML5 Audio Player- Best WordPress Audio Player Plugin <= 2.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- bplugins HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
- Cross-site scripting (XSS)