Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 13
Reset filtersHTML5 Video Player with Playlist <= 2.50 - Reflected Cross-Site Scripting
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler
Flash & HTML5 Video <= 2.5.30 - Missing Authorization
Flash & HTML5 Video <= 2.5.31 - Authenticated (Subscriber+) Information Exposure
HTML5 Video Player <= 2.5.26 - Unauthenticated SQL Injection
HTML5 Video Player <= 2.5.24 - Unauthenticated SQL Injection via id
Html5 Video Player <= 2.5.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Video.js – HTML5 Video Player for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
HTML5 Video Player with Playlist <= 2.4.0 - Reflected Cross-Site Scripting
Secure HTML5 Video Player < 3.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.