TI-2025-07839 CVE-2025-8559 · GHSA-r9r9-8rf7-6x84
All in One Music Player <= 1.3.1 - Authenticated (Contributor+) Path Traversal via theme Parameter
Priority LOW 29
The All in One Music Player plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.1 via the 'theme' parameter.