CVE-2014-9177

MEDIO 5.0CVE-2014-9177 · Published 02/12/2014 · updated 17/06/2026

In breve

CVE-2014-9177 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda html5 mp3 player with playlist free (svnlabs).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.6%, superiore al 85.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
html5 mp3 player with playlist free svnlabs	`≤ 2.6`	No fix yet

Description

The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote attackers to obtain the installation path via a request to html5plus/playlist.php.

References

h4x0resec.blogspot.com/2014/11/wordpress-html5-mp3-player-with.html · Exploit
packetstormsecurity.com/files/129286/WordPress-Html5-Mp3-Player-Full-Path-Disclosure.html · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/98988
wordpress.org/plugins/html5-mp3-player-with-playlist/changelog · Patch

Altre vulnerabilità di html5 mp3 player with playlist free

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free