Known CVE

WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversal

WordPress SE HTML5 Album Audio Player 1.1.0 contains a directory traversal vulnerability in download_audio.php that allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

CVE-2015-4414

Medium2015CVSS 5CWE-22

cve2015 · wordpress · wp-plugin · lfi · edb · packetstorm · se_html5_album_audio_player_project · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website