Search vulnerabilities

Results 2

Export CSV
CVE-2025-30592

WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability

Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through <= 1.6.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
CVE-2013-7240

Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dew_file parameter.

CVSS 2.0 · 5.0 Medium EPSS 19.6% KEV · Not listed