Skip to content
OpenAdvisories

Vendor

sanzeeb3

1 known vulnerabilities.

Products

All in One Music Player 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-8559

    All in One Music Player <= 1.3.1 - Authenticated (Contributor+) Path Traversal via theme Parameter

    The All in One Music Player plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.1 via the 'theme' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the co…

    sanzeeb3 All in One Music Player Web / CMS