Skip to content
OpenAdvisories

Product · codepeople

Music Store – WordPress eCommerce

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-115497

    Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter

    The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary…

    codepeople Music Store – WordPress eCommerce Web / CMS