CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The All in One Music Player plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.1 via the 'theme' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which can contain sensitive information.
Explanation of Vulnerability in Simple Terms
All in One Music Player versions up to 1.3.1 contain a path traversal vulnerability that allows authenticated users to read arbitrary files from the server. An attacker with low-level access can bypass directory restrictions and access sensitive files outside the intended music player directory. This could expose configuration files, database credentials, or other sensitive data stored on the server.
What an attacker can do
Read arbitrary files from the server, including sensitive configuration and credential files.
Potential impact on your site
Sensitive files like database credentials or config files may be exposed to authenticated users.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
