Themes Vulnerabilities

Music - Multiple Script Direct Request Path Disclosure

Description

The Music WordPress theme was affected by a Multiple Script Direct Request Path Disclosure security vulnerability.

Affects Themes

music
No known fix

References

URL
https://seclists.org/fulldisclosure/2013/Apr/238

Classification

Type
FPD
OWASP top 10
A6: Security Misconfiguration
CWE
CWE-209

Miscellaneous

Verified
No
WPVDB ID
80d7f0d0-807e-42cb-ad21-bf8db3821785

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-02-17
Title
Actionwear products sync < 2.3.3 - Unauthenticated Full Patch Disclosure
Published
2015-08-06
Title
MP3-jPlayer < 2.5 - Full Path Disclosure
Published
2014-08-01
Title
grou-r&om-image-widget - Full Path Disclosure
Published
2014-08-01
Title
onepagewebsite - Full Path Disclosure
Published
2025-12-15
Title
Fancy Product Designer | WooCommerce WordPress < 6.5.0 - Unauthenticated Full Path Disclosure via 'pdf' Parameter