Skip to content
OpenAdvisories
High · 7.5 CVE-2025-31070 EUVD-2025-21613GHSA-hf9j-94g7-447j

WordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin <= 2.5 - Arbitrary File Download vulnerability

Published Jul 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg-cleverbakery allows Path Traversal.This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a through <= 2.5.

Affected products

VendorProductAffectedFixed
LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon ≤ 2.5 —

References