H5P vulnerabilities

🔔 Create alert RSS

Published CVEs affecting H5P products: 1 record(s), with severity, exploitation and fixes.

H5P 1

Exploited only (KEV) →

CVE-2026-56006 High · 7.1 CWE-79 Jun 25, 2026

WordPress H5P plugin <= 1.17.6 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in H5P <= 1.17.6 versions.