WordPress Plugin Vulnerabilities

HTML5 jQuery Audio Player 2.3 - playlist/add_playlist.php id Parameter SQL Injection

Description

The HTML5 jQuery Audio Player WordPress plugin was affected by a playlist/add_playlist.php id Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
html5-jquery-audio-player
Fixed in 2.4

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
90578e49-f68b-45f7-9a68-ec3cc08207ff

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-09-22
Title
Wp tabber widget <= 4.0 - Authenticated (Contributor+) SQL Injection
Published
2025-07-08
Title
Pakke Envíos <= 1.0.2 - Authenticated (Subscriber+) SQL Injection
Published
2025-04-16
Title
Hostel < 1.1.5.7 - Authenticated (Administrator+) SQL Injection
Published
2024-06-28
Title
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress < 1.2.11 - Unauthenticated SQL Injection via 'uwp_sort_by'
Published
2025-04-08
Title
Bulk Product Sync < 9.0 - Unauthenticated SQL Injection