Interactive Content - H5P
Healthy: vulnerability published 22 Oct 2026, fixed in 1.17.10.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 65 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 22 Oct 2026, fixed in 1.17.10. Update to version 1.17.10 or later.22 Oct 2026Evidence
- WarningSEC-1Vulnerability published 21 Oct 2026, fixed in 1.17.10. Update to version 1.17.10 or later.21 Oct 2026Evidence
- InfoSEC-36 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| icc0rz | 15 May 2014 to 16 Dec 2025, 107 commits |
|---|---|
| thomasmars | 7 Nov 2016 to 19 Aug 2019, 12 commits |
| fnoks | 11 Nov 2016 to 7 May 2024, 5 commits |
| underhaug | 8 May 2024 to 13 May 2024, 2 commits |
| makmentins | 26 Feb 2026 to 20 Oct 2026, 19 commits |
5 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 15 days ago
- Releases, 24 months
- 9
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 3 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 3 |
| Q2 2026 | 4 |
| Q3 2026 | 1 |
| Q4 2026 | 1 |
Last release 20 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Support
0% of 2 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 22 Oct 2026 | Interactive Content – H5P <= 1.17.9 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.17.9 | 1.17.10 | 0 |
| 21 Oct 2026 | Interactive Content – H5P <= 1.17.9 - Authenticated (Contributor+) Insecure Direct Object Reference | 4.3 | <= 1.17.9 | 1.17.10 | 0 |
| 26 Jun 2026 | Interactive Content – H5P <= 1.17.7 - Authenticated (Contributor+) Arbitrary File Deletion | 8.1 | <= 1.17.7 | 1.17.8 | 0 |
| 18 Jun 2026 | Interactive Content – H5P <= 1.17.6 - Reflected Cross-Site Scripting | 6.1 | <= 1.17.6 | 1.17.7 | 0 |
| 28 Dec 2025 | H5P <= 1.16.1 - Missing Authorization | 5.3 | <= 1.16.1 | 1.16.2 | n/a |
| 13 Oct 2025 | Interactive Content – H5P <= 1.16.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.16.0 | 1.16.1 | n/a |
| 6 Jun 2024 | H5P <= 1.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.15.7 | 1.15.8 | 127 |
Source: Wordfence Intelligence.
Reputation
| Q4 2023 | 5.0 |
|---|---|
| Q1 2024 | 5.0 |
| Q1 2026 | 4.0 |
Average rating fell from 5.0 to 4.0 between Q4 2023 and Q1 2026.
| 5 star | 55 |
|---|---|
| 4 star | 1 |
| 3 star | 3 |
| 2 star | 0 |
| 1 star | 2 |
- H5P is not the tool for education (language) projects unless… · 1 star · 13 Apr 2021
- Not worth the effort · 1 star · 12 Sep 2019
Momentum
40,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 14,839 |
|---|---|
| 11 May 2026 | 3,978 |
| 18 May 2026 | 16,561 |
| 25 May 2026 | 4,820 |
| 1 Jun 2026 | 2,777 |
| 8 Jun 2026 | 2,295 |
| 15 Jun 2026 | 3,131 |
| 22 Jun 2026 | 2,769 |
| 29 Jun 2026 | 2,047 |
| 6 Jul 2026 | 2,677 |
| 13 Jul 2026 | 1,636 |
| 20 Jul 2026 | 1,675 |
| 27 Jul 2026 | 15,041 |
| 3 Aug 2026 | 5,527 |
| 10 Aug 2026 | 2,805 |
| 17 Aug 2026 | 2,359 |
| 24 Aug 2026 | 2,750 |
| 31 Aug 2026 | 2,405 |
| 7 Sep 2026 | 2,030 |
| 14 Sep 2026 | 1,871 |
| 21 Sep 2026 | 2,241 |
| 28 Sep 2026 | 1,950 |
| 5 Oct 2026 | 1,936 |
| 12 Oct 2026 | 1,745 |
| 19 Oct 2026 | 18,463 |
| 26 Oct 2026 | 5,443 |
| 2 Nov 2026 | 542 |
Weekly downloads over the last 4 weeks are 40% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.17.10 |
|---|---|
| Author | icc0rz |
| Added | 15 May 2014 |
| Last updated | 20 Oct 2026 |
| Active installs | 40,000+ |
| Requires WordPress | 3.8.1 |
| Tested up to | 7.0.8 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | quiz, video, editor, slider, education |
Questions
Is Interactive Content - H5P still maintained?
Interactive Content - H5P was last updated on 20 Oct 2026. Its Canary status is Healthy.
Is Interactive Content - H5P safe?
Interactive Content - H5P has no open unpatched vulnerabilities on record. 6 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Interactive Content - H5P?
The wordpress.org author is icc0rz. Recent committers: makmentins, icc0rz, underhaug, fnoks, thomasmars. We have recorded no ownership change.
What can I use instead of Interactive Content - H5P?
Plugins in the same category with a higher Canary Score: Democracy Poll, Quiz Builder for WooCommerce - Product Recommendations, SurveyX Builder - Survey, Poll, Quiz & Feedback Form, Interact Quiz & Form Embed, Wheel of Life: Coaching and Assessment Tool for Life Coach.