cbcvebase.

Damjan Codeart Google Mp3 Audio Player vulnerabilities

1 known vulnerability affecting damjan/codeart_google_mp3_audio_player.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2014-125130P1HIGHCVSS 7.5Exploited≤ 1.0.112026-10-02
CVE-2014-125130 [HIGH] CWE-22 CVE-2014-125130: CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contai CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of direct_download.php. Attackers can request paths ../../wp-config.php without
nvd
Damjan Codeart Google Mp3 Audio Player vulnerabilities | cvebase