WordPress Plugin Vulnerabilities

Audio Player - player.swf playerID Parameter XSS

Description

The audio-player WordPress plugin was affected by a player.swf playerID Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
audio-player
Fixed in 2.0.4.6

References

CVE
CVE-2013-1464
URL
https://packetstormsecurity.com/files/#120129/
URL
https://seclists.org/bugtraq/2013/Feb/35

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
4a1a72bf-d022-4889-9c45-ce6b58e86acb

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-09-25
Title
Common Tools for Site <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Published
2025-09-29
Title
dbview <= 0.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-03-04
Title
Stylish Google Sheet Reader < 4.1 - Reflected XSS
Published
2024-11-04
Title
YaDisk Files <= 1.2.5 - Contributor+ Stored XSS via Shortcode
Published
2023-12-27
Title
Restaurant Reservations < 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting