Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:the_music_store_project:the_music_store:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

The Music Store WordPress Plugin: Directory traversal vulnerability (CVE-2026-115497)

The Music Store WordPress plugin version 1.4.7 and earlier contains a directory traversal vulnerability in the f parameter, allowing unauthenticated attackers with a valid purchase_id to read arbitrary files from the server.

The Music Store – WordPress eCommerce web-application wordpress cve-2026-115497 file-read directory-traversal
1r 1t 1c