Skip to content
OpenAdvisories
High · 7.5 CVE-2025-25155 EUVD-2025-4064GHSA-fjjx-pvp3-hvgv

WordPress Music Sheet Viewer plugin <= 4.1 - Arbitrary File Read vulnerability

Published Feb 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in efreja Music Sheet Viewer music-sheet-viewer allows Path Traversal.This issue affects Music Sheet Viewer: from n/a through <= 4.1.

Affected products

VendorProductAffectedFixed
efreja Music Sheet Viewer ≤ 4.1 —

References