HTML5 jQuery Audio Player
HTML5 jQuery Audio Player has one disclosed vulnerability in the WordSec catalog, all reported in 2014; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for HTML5 jQuery Audio Player has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2014.
All of these findings were reported by Prajal Kulkarni. HTML5 jQuery Audio Player is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.7.35.
HTML5 jQuery Audio Player <= 2.6.2 - Cross-Site Scripting
Read the full analysisVulnerability Records

HTML5 jQuery Audio Player
Author
Maeve Lander
This trendy looking music player lets you add a single audio track or a full playlist to your WordPress site using shortcode. You can customise the colours of the player, and also display ratings, album cover art, and buy/download link if needed. This audio player is different from others on offer because it works on all major browsers, both PC and Mac, and on mobile devices including iPhone/iPad. Plus it looks really cool! Key Features Uses mp3 and ogg file formats Attractive and customisable design Works in all major browsers – IE9+, Safari, Opera, Firefox, Chrome Works on mobile devices including iPhone/iPad Sell your music easily by integrating with Easy Digital Downloads – tutorial here Autoplay on/off option User star ratings Add the player to any post/page using shortcode [hmp_player] Demo Click here for demo This demo shows the player with tracklist enabled, ratings on, and autoplay off. Duration and buy/download button is also switched off in this example. Pro vs Lite Version This is Lite (free) version of the plugin. Get Pro Version if you need the following advanced features: Mulitple Playlists � create as many playlists as you like and embed any number of players on different pages of your site Drag n Drop playlist manager so you can reorder tracks Fully Responsive � resizes and adjust layout/design for responsive websites On/off option for ratings, artwork, artist field, auto-repeat, and cover art Widget support Embed full playlist or individual tracks with shortcodes Works in all modern browsers – IE9+, Safari, Opera, Firefox, Chrome Works on mobile devices including iPhone/iPad Can enable Buy or Download tracks buttons (x3) Integrates with Easy Digital Downloads plugin for selling your music Please note that Pro version will not work on Windows Server environment. Credits This is a WordPress version of the player created by Saleem over at Codebase Hero with thanks also to Orman Clark for the original PSD.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C