CVE-2015-2199

MEDIO 6.5CVE-2015-2199 · Published 03/03/2015 · updated 17/06/2026

En resumen

CVE-2015-2199 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a audio player (wonderplugin).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.5%, mayor que el 84.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
audio player wonderplugin	`≤ 2.0`	No fix yet

Description

Multiple SQL injection vulnerabilities in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow (1) remote authenticated users to execute arbitrary SQL commands via the item[id] parameter in a wonderplugin_audio_save_item action to wp-admin/admin-ajax.php or remote administrators to execute arbitrary SQL commands via the itemid parameter in the (2) wonderplugin_audio_show_item, (3) wonderplugin_audio_show_items, or (4) wonderplugin_audio_edit_item page to wp-admin/admin.php.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free