cbcvebase.

Tharkun69 Player Leaderboard vulnerabilities

1 known vulnerability affecting tharkun69/player_leaderboard.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2025-12824P2HIGHCVSS 8.8≥ 1.0.0, ≤ 1.0.22025-12-12
CVE-2025-12824 [HIGH] CWE-22 CVE-2025-12824: The Player Leaderboard plugin for WordPress is vulnerable to Local File Inclusion in all versions up The Player Leaderboard plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.2 via the 'player_leaderboard' shortcode. This is due to the plugin using an unsanitized user-supplied value from the shortcode's 'mode' attribute in a call to include() without proper path validation. This makes it possible for a
nvd
Tharkun69 Player Leaderboard vulnerabilities | cvebase