Skip to content
OpenAdvisories

Vendor

Mufeng

4 known vulnerabilities.

Products

Hermit 音乐播放器 (WordPress plugin) 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-29412

    WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allow attackers to delete cache, delete a source, create source.

    Mufeng Hermit 音乐播放器 (WordPress plugin) Web / CMS
  • Medium 4.7
    CVE-2022-29413

    WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability

    Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress via &title parameter.

    Mufeng Hermit 音乐播放器 (WordPress plugin) Web / CMS