Log out
Get PRO

Latest

Input validation vulnerability in Chameleon HTML5 Audio Player With/Without Playlist 3.5.6

  • Severity: medium-risk
  • Status: Open
  • Publication: May 16, 2025

The Chameleon HTML5 Audio Player With/Without Playlist plugin for WordPress has a security issue that could allow hackers to access sensitive information from the database. This vulnerability affects versions up to 3.5.6 and is caused by insufficient protection of user input and inadequate preparation of SQL queries. Attackers with contributor-level access or higher could potentially add their own SQL queries to existing ones and retrieve confidential data from the database.

Detected in:

Chameleon HTML5 Audio Player With/Without Playlist open vulnerable versions: >= * <= 3.5.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.