CVE-2024-10803

Summary

CVE-2024-10803: Unpatched versions of the MP3 Sticky Player plugin for WordPress contain a Directory Traversal vulnerability in the content/downloader.php file. This issue allows unauthenticated attackers to access the contents of arbitrary files on the affected server, potentially exposing sensitive information. The vulnerability was identified in all versions up to and including 8.0, with the patched version being released as the same version number.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.