Skip to content
OpenAdvisories

Vendor

Mufeng

4 known vulnerabilities.

Products

Hermit 音乐播放器 (WordPress plugin) 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2022-29411

    WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Unauthenticated SQL Injection SQLi) vulnerability

    SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id).

    Mufeng Hermit 音乐播放器 (WordPress plugin) Web / CMS
  • High 7.4
    CVE-2022-29410

    WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Authenticated SQL Injection (SQLi) vulnerability

    Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers with Subscriber or higher user roles to execute SQLi attack via (&ids).

    Mufeng Hermit 音乐播放器 (WordPress plugin) Web / CMS