WordPress Music Store – WordPress eCommerce plugin <= 1.4.7 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Quentin VILLAIN in WordPress Plugin Music Store versions = 1.4.7...

CVE-2026-115497

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

EUVD-2026-108583

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

CVE-2026-115497 Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

CVE-2026-115497

The Music Store WordPress eCommerce plugin is vulnerable to Directory Traversal in all versions up to and including 1.4.7 . The flaw exists in the 'f' parameter , allowing unauthenticated attackers to read arbitrary files on the server, potentially exposing sensitive information. Successful explo...

PT-2026-121757

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

WordPress Music Store plugin < 1.4.5 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by nobody in WordPress Plugin Music Store versions 1.4.5...

CVE-2026-82304

The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

CVE-2026-82304 Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler

The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

CVE-2026-82304 Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler

The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

CVE-2026-82304

The Music Store WordPress plugin (versions before 1.4.5 ) is vulnerable to an unauthenticated SQL injection (SQLi). The root cause is the failure to sanitise and escape user input before its inclusion in a SQL statement. Specifically, the vulnerability exists within the paypal-data handler. An un...

EUVD-2026-71856

The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

CVE-2026-82304: Improper Neutralization of Special Elements used in an SQL Command

The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

PT-2026-86340

Name of the Vulnerable Software and Affected Versions The Music Store WordPress plugin versions prior to 1.4.5 Description Unauthenticated users can perform a SQL injection because the plugin fails to sanitize and escape user-supplied parameters before incorporating them into a SQL statement. Thi...

CVE-2016-10992

The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports fromyear parameter...

EUVD-2016-1983

Malware in sbrugna...

EUVD-2007-3504

Malware in sbrugna...

EUVD-2005-3850

Malware in sbrugna...

EUVD-2025-3827

Malicious code in bioql PyPI...

CVE-2025-24626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Music Store music-store allows Reflected XSS.This issue affects Music Store: from n/a through = 1.1.19...