CVE-2024-7727

概要

参考情報

• plugins.trac.wordpress.org/browser/html5-video-player/trunk/inc/Model/Ajax.php · Issue Tracking
• plugins.trac.wordpress.org/browser/html5-video-player/trunk/inc/Model/ImportData.php · Issue Tracking
• plugins.trac.wordpress.org/changeset/3139559 · Patch
• wordfence.com/threat-intel/vulnerabilities/id/908df18e-7178-4d40-becb-86e1a714a7da · Third Party Advisory

html5 video player のその他の脆弱性

• CVE-2024-43296高 8.8Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Lev…
• CVE-2024-7721中 4.3The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized modification of data due to a …
• CVE-2024-5522中 6.5The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL s…
• CVE-2024-1061緊急 9.8The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parame…
• CVE-2023-6485中 5.4The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing …