https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:43:23 +0000 https://cve.radiocsirt.org/vuln/cve-2024-7721 <p><strong>Affected:</strong> bplugins HTML5 Video Player – Embed and Play Videos in Custom Player</p> <p>The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the &#39;save_password&#39; function in all versions up to, and including, 2.5.34. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set any options that are not explicitly checked as false to an array, including enabling user registration if it has been disabled.</p> <p><strong>Affected:</strong> bplugins HTML5 Video Player – Embed and Play Videos in Custom Player</p> <p>The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the &#39;save_password&#39; function in all versions up to, and including, 2.5.34. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set any options that are not explicitly checked as false to an array, including enabling user registration if it has been disabled.</p> https://cve.radiocsirt.org/vuln/cve-2024-7721