WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversal
WordPress SE HTML5 Album Audio Player 1.1.0 contains a directory traversal vulnerability in download_audio.php that allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
PoC 已收录se_html5_album_audio_player
CVSS5.0EPSS 18.8%