Vulnerabilities

TI-2023-28635 CVE-2023-52207 · GHSA-p6wf-q8mw-wpwr

WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection

MEDIUM 40

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00616 Published 2024-01-08 No fix listed CWE-502

TI-2014-07445 CVE-2014-9177 · GHSA-h67g-9qc9-87h4

The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote…

LOW 28

The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote attackers to obtain the installation path via a request to html5plus/playlist.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02566 Published 2014-12-02 No fix listed CWE-200

Vulnerabilities

Filters

WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection

The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote…