cve/2024/CVE-2024-1061.md

CVE-2024-1061

Description

The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the  'get_view' function.

POC

Reference

• https://www.tenable.com/security/research/tra-2024-02
• https://www.tenable.com/security/research/tra-2024-02

Github

• https://github.com/JoshuaMart/JoshuaMart
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/tanjiti/sec_profile