High · 8.3 CVE-2022-29411 EUVD-2022-33749GHSA-65r7-64ww-jm72

WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Unauthenticated SQL Injection SQLi) vulnerability

Published Apr 28, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id).

Vendor	Product	Affected	Fixed
Mufeng	Hermit 音乐播放器 (WordPress plugin)	<= 3.1.6 – ≤ 3.1.6	—