CVE-2026-118097

The bPlugins Flash & HTML5 Video WordPress plugin (specifically the html5-video-player component) is vulnerable to Stored Cross-Site Scripting (XSS) . This flaw is caused by improper neutralization of input during web page generation. The vulnerability affects versions up to and including 2.14.0 ...