Hermit 音乐播放器 (WordPress plugin) vulnerabilities

1 known vulnerability in Hermit 音乐播放器 (WordPress plugin) from Mufeng. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Hermit 音乐播放器 (WordPress plugin): Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-29410Apr 28, 2022Mufeng

  Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers with Subscriber or higher user roles to execute SQLi attack via (&ids).