Path Traversal Vulnerability in HTML5 Radio Player by LambertGroup
CVE-2025-31070

7.5HIGH

Key Information:

Vendor

WordPress
Status
Html5 Radio Player - WPbakery Page Builder Addon
Vendor
CVE Published:
16 July 2025

What is CVE-2025-31070?

The HTML5 Radio Player - WPBakery Page Builder Addon by LambertGroup is susceptible to a Path Traversal vulnerability. This security flaw permits attackers to manipulate file paths, potentially leading to unauthorized file access. Versions affected include all releases up to 2.5. It is crucial for users of this plugin to apply necessary updates and implement security measures to mitigate the risk of exploitation.

Affected Version(s)

HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5

References

https://patchstack.com/database/wordpress/plugin/lbg-clev...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) (Patchstack Alliance)
.
CVE-2025-31070 : Path Traversal Vulnerability in HTML5 Radio Player by LambertGroup