directory traversal vulnerability in LUNA RADIO PLAYER plugin for WordPress

CVE-2024-10816

What is CVE-2024-10816?

The LUNA RADIO PLAYER plugin for WordPress is affected by a Directory Traversal vulnerability that allows unauthenticated attackers to access and read the contents of sensitive files on the server through the js/fallback.php file. This exposure can lead to the leakage of private data stored on the server, increasing the risk of exploitation for malicious purposes. Users of the LUNA RADIO PLAYER are advised to review their security measures and update to the latest version to mitigate this risk.

References