HTML5 Lyrics Karaoke Player
HTML5 Lyrics Karaoke Player has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2024; none of them are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
None of the 2 issues recorded for HTML5 Lyrics Karaoke Player have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2014.
2 independent researchers contributed these findings, one record each. HTML5 Lyrics Karaoke Player is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.7.17.
CVE-2024-52473HTML5 Lyrics Karaoke Player <= 2.4 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
HTML5 Lyrics Karaoke Player
Author
Sandeep Verma
HTML5 Lyrics Karaoke Player Plugin enable wordpress users to sing and play song text lyrics. Free Features Supports MP3 formats Supports Text Song Lyrics Social Links Facebook / Twitter Works in IE, Safari, Firefox, Chrome, Opera Player have shortcode for post/page [html5lyrics id=ID] i.e. [html5lyrics id=1] Paid Features Supports MP3 formats Supports Text Song Lyrics Support Images on song’s cue points Color / Size Customization Supports Unicode Social Link Customization Multiple player on same page / post Works in IE, Safari, Firefox, Chrome, Opera, mobile devices including Android/iOS Supports Wowza / Amazon Cloud Front / S3 HTTP Streaming Facebook page customization with player Player have shortcode for post/page [html5lyrics id=ID … ] i.e. [html5lyrics id=1 … ] Best support on email / skype Get fully customized HTML5 Lyrics Karaoke Player for Website (http://html5plus.svnlabs.com/shop/html5-mp3-player-with-lyrics/) or Contact Us Standalone Credit Audio.js Player HTML5 Audio Read-Along Support For support please visit http://html5.svnlabs.com/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C