H5P CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM H5P CVE published 2026-10-21

CVE-2026-112868

The CVE-2026-112868 vulnerability is an Insecure Direct Object References (IDOR) issue in the WordPress H5P plugin versions up to 1.17.9. This vulnerability allows for authorization bypass through user-controlled keys, potentially leading to security level exploitation. The CVSS score for this vulnerability is 4.3, indicating a medium severity level.