Path Traversal Vulnerability in efreja Music Sheet Viewer
CVE-2025-25155

7.5HIGH

Key Information:

Vendor

WordPress
Status
Music Sheet Viewer
Vendor
CVE Published:
7 February 2025

What is CVE-2025-25155?

The efreja Music Sheet Viewer is vulnerable to a path traversal issue, allowing unauthorized access to restricted directories. This flaw can potentially enable an attacker to read arbitrary files within the system, compromising sensitive information. The vulnerability affects the Music Sheet Viewer version 4.1 and earlier, posing a significant risk to users who may not have adequately secured their installations.

Affected Version(s)

Music Sheet Viewer <= 4.1

References

https://patchstack.com/database/wordpress/plugin/music-sh...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Abdi Pranata (Patchstack Alliance)
.