CVE-2025-27005 | HTML5 Video Player Plugin up to 5.3.5 on WordPress cross site scripting

22:02 - 14 Jan 2026

A vulnerability was found in HTML5 Video Player Plugin up to 5.3.5 on WordPress and classified as problematic. The affected element is an unknown function. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2025-27005. The attack can be executed remotely. There is not any exploit available.