First published: Fri Feb 07 2025(Updated: )
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in efreja Music Sheet Viewer allows Path Traversal. This issue affects Music Sheet Viewer: from n/a through 4.1.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
efreja Music Sheet Viewer | >=n/a<4.1 | |
WordPress Music Sheet Viewer | <=4.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-25155 is considered a high severity vulnerability due to its potential for unauthorized file access.
To fix CVE-2025-25155, update the efreja Music Sheet Viewer or WordPress Music Sheet Viewer plugin to the latest version beyond 4.1.
CVE-2025-25155 is a Path Traversal vulnerability that allows attackers to access files outside of the intended directory.
CVE-2025-25155 affects all versions of efreja Music Sheet Viewer up to and including 4.1.
Yes, CVE-2025-25155 can affect your WordPress site if you are using the Music Sheet Viewer plugin version 4.1 or earlier.