Waveplayer (Unknown) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-11-19. Vendor: Unknown.

CVEs of Waveplayer

• CVE-2025-12057 - CVSS 9.8 (critical), 2025-11-19: The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file to be copied locally,…