CVE-2026-57321: WordPress H5P plugin <= 1.17.7 - Arbitrary File Deletion vulnerability
Published Jun 26, 2026
·Updated
Contributor Arbitrary File Deletion in H5P <= 1.17.7 versions.
Affected Software
1 affected component
H5P<=1.17.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress H5P pluginto a version that resolves this vulnerability.Fixed in 1.17.8
Event History
Jun 26, 2026
CVE Published
via MITRE·02:53 PM
Data Sourced
via MITRE·02:53 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-57321?
CVE-2026-57321 has a severity rating of high, specifically 7.1 on the CVSS scale.
2
How do I fix CVE-2026-57321?
To fix CVE-2026-57321, update the H5P plugin to version 1.17.8 or later.
3
What type of vulnerability is CVE-2026-57321?
CVE-2026-57321 is classified as an Arbitrary File Deletion vulnerability.
4
Which software is affected by CVE-2026-57321?
The vulnerability impacts the H5P plugin for WordPress versions 1.17.7 and earlier.
5
What is the exploitation impact of CVE-2026-57321?
Exploitation of CVE-2026-57321 allows contributors to delete arbitrary files on the server.