H
H5P
Security Risk Profile
23
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 27, 2024 to present
3
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
23/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
1Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
2
Most Affected Products
1. H5P H5P WordPress plugin1
2. H5P H5P1
3. wordpress/h5p1
4. H5P H5p Wordpress1
Recent Vulnerabilities
See more →CVE-2026-112868
CVSS 4.3medium
WordPress H5P plugin <= 1.17.9 - Insecure Direct Object References (IDOR) vulnerability
Oct 21, 2026🔧 No Patch
CVE-2025-62951
CVSS 6.5medium
WordPress H5P plugin <= 1.16.0 - Cross Site Scripting (XSS) vulnerability
Oct 27, 2025🔧 No Patch
CVE-2024-3111
CVSS 7.1high
H5P < 1.15.8 - Contributor+ Stored XSS
Jun 27, 2024🔧 No Patch
Monitor H5P in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.