https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:44:38.206524+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-10803 CVE-2024-10803 — MP3 Sticky Player <= 8.0 - Unauthenticated Arbitrary File Read/Download 2026-10-07T08:44:38.222679+00:00

Affected: FWDesign MP3 Sticky Player, fwdesign mp3_sticky_player

The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Please note the vendor released the patched version as the same version as the affected version.