TI-2025-11747 CVE-2025-12824 · GHSA-v9fh-g7wh-f682
Player Leaderboard 1.0.0 - 1.0.2 - Authenticated (Contributor+) Local File Inclusion
Priority MEDIUM 41
The Player Leaderboard plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.2 via the 'player_leaderboard' shortcode.