Skip to content
OpenAdvisories

Vendor

efreja

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    WordPress Music Sheet Viewer plugin <= 4.1 - Arbitrary File Read vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in efreja Music Sheet Viewer music-sheet-viewer allows Path Traversal.This issue affects Music Sheet Viewer: from n/a through <= 4.1.

  • High 7.5

    Music Sheet Viewer <= 4.1 - Unauthenticated Arbitrary File Read

    The Music Sheet Viewer plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.1 via the read_score_file() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the …