Lucene search
+L

8 matches found

Nuclei
Nuclei
•added 2026/10/09 2:16 a.m.•192 views

WordPress HTML5 Video Player < 2.5.27 - SQL Injection

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks id: CVE-2024-5522 info: name: WordPress HTML5 Video Player 2.5.27 - SQL Injection...

6.5CVSS6AI score0.02618EPSS
SaveExploits6References2
Kitploit
Kitploit
•added 2026/10/09 12:48 a.m.•20 views

CVE-2024-5522

Un scanner d'exploit PoC pour la vulnérabilité CVE-2024-5522 sur les sites WordPress. Cet outil permet d'identifier et d'exploiter la vulnérabilité en scannant une liste d'URL cibles et en tentant une charge utile spécifique pour déterminer si le site est vulnérable. Fonctionnalités Analyse...

6.5CVSS5.9AI score0.02618EPSS
SaveExploits6
GithubExploit
GithubExploit
•added 2024/09/11 4:46 a.m.•546 views

Exploit for SQL Injection in Bplugins Html5_Video_Player

CVE-2024-5522-PoC : HTML5 Video Player 2.5.27 - Unauthentica...

6.5CVSS7.1AI score0.02618EPSS
SaveExploits6
OSV
OSV
•added 2024/06/20 6:15 a.m.•16 views

CVE-2024-5522

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

6.5CVSS5.8AI score0.02618EPSS
SaveExploits6References1
Cvelist
Cvelist
•added 2024/06/20 6:00 a.m.•73 views

CVE-2024-5522 HTML5 Video Player < 2.5.27 - Unauthenticated SQLi

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

0.02618EPSS
SaveExploits6References1
Vulnrichment
Vulnrichment
•added 2024/06/20 6:00 a.m.•29 views

CVE-2024-5522 HTML5 Video Player < 2.5.27 - Unauthenticated SQLi

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

7.6AI score0.02618EPSS
SaveExploits6References1
GithubExploit
GithubExploit
•added 2024/05/31 4:41 a.m.•794 views

Exploit for SQL Injection in Bplugins Html5_Video_Player

CVE-2024-5522-Poc CVE-2024-5522 HTML5 Video Player = 2.5.2...

6.5CVSS7.2AI score0.02618EPSS
SaveExploits6
Patchstack
Patchstack
•added 2024/05/31 12:00 a.m.•38 views

WordPress Flash & HTML5 Video Plugin < 2.5.27 is vulnerable to SQL Injection

Software Flash & HTML5 Video Type Plugin Vulnerable versions 2.5.27 Fixed in 2.5.27 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-5522 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID a6949d7fc215 Credits Mayank Deshmukh Required privilege...

6.5CVSS6.7AI score0.02618EPSS
SaveExploits6References4Affected Software1
Rows per page
Query Builder