Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-5522

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Exploit prediction scoring system (EPSS) score
EPSS Score 0.731
EPSS Ranking 98.7%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2024-5522


Contact Us

Shodan ® - All rights reserved