Path Traversal Vulnerability in efreja Music Sheet Viewer
CVE-2025-25155

7.5HIGH

Key Information:

Vendor

WordPress
Status
Music Sheet Viewer
Vendor
CVE Published:
7 February 2025

What is CVE-2025-25155?

The efreja Music Sheet Viewer is vulnerable to a path traversal issue, allowing unauthorized access to restricted directories. This flaw can potentially enable an attacker to read arbitrary files within the system, compromising sensitive information. The vulnerability affects the Music Sheet Viewer version 4.1 and earlier, posing a significant risk to users who may not have adequately secured their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Music Sheet Viewer <= 4.1

References

https://patchstack.com/database/wordpress/plugin/music-sh...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Abdi Pranata (Patchstack Alliance)
JSON
.