WordPress Plugin Vulnerabilities

Dewplayer <= 1.2 - dewplayer.php Direct Request Path Disclosure Weakness

Description

The dewplayer-flash-mp3-player WordPress plugin was affected by a dewplayer.php Direct Request Path Disclosure Weakness security vulnerability.

Affects Plugins

Plugin icon
dewplayer-flash-mp3-player
No known fix

References

URL
https://seclists.org/fulldisclosure/2013/Dec/209

Classification

Type
FPD
OWASP top 10
A6: Security Misconfiguration
CWE
CWE-209

Miscellaneous

Verified
No
WPVDB ID
c74e20ca-b691-43aa-a9f0-04f75084a896

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
Meta Slider 2.1.6 - Multiple Full Path Disclosure
Published
2014-08-01
Title
Music - Multiple Script Direct Request Path Disclosure
Published
2014-08-01
Title
Feather12 - Multiple Script Direct Request Path Disclosure
Published
2014-08-01
Title
WordPress 3.5.2 - Media Library Multiple Function Path Disclosure
Published
2014-08-01
Title
Portable phpMyAdmin - /pma/phpinfo.php Direct Request System Information Disclosure