CVE · Medium

CVE-2025-68505 — Interactive Content – H5P [h5p] < 1.16.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-68505 Interactive Content – H5P [h5p] < 1.16.2 Missing Authorization Medium 5.3 < 1.16.2 1.16.2 2025-12-24

CVE-2025-68505

A security flaw exists within the Interactive Content - H5P plugin for WordPress, where insufficient permission checks allow unverified users to execute an illicit operation across all iterations prior to version 1.16.2.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.