Lucene search

K
cve[email protected]CVE-2016-0796
HistoryJul 28, 2022 - 5:15 p.m.

CVE-2016-0796

2022-07-2817:15:07
CWE-287
CWE-610
web.nvd.nist.gov
25
9
cve-2016-0796
wordpress
mb.miniaudioplayer
html5
audio player
mp3
security vulnerability
open proxy
security bypass
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, including open proxy and security bypass vulnerabilities because it fails to properly verify user-supplied input. An attacker may leverage these issues to hide attacks directed at a target site from behind vulnerable website or to perform otherwise restricted actions and subsequently download files with the extension mp3, mp4a, wav and ogg from anywhere the web server application has read access to the system. WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files version 1.7.6 is vulnerable; prior versions may also be affected.

Affected configurations

Vulners
NVD
Node
wordpressplugin_newsletter_pluginRange1.7.6
VendorProductVersionCPE
wordpressplugin_newsletter_plugin*cpe:2.3:a:wordpress:plugin_newsletter_plugin:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "WordPress Plugin mb.miniAudioPlayer-an",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "version 1.7.6"
      }
    ]
  }
]

Social References

More

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

Related for CVE-2016-0796