CVE-2014-5181: Last.fm Rotation Plugin Project Lastfm-Rotation Plugin

Medium severity, CVSS 5.0. EPSS: 4.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation (lastfm-rotation) plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the snode parameter.

Affected products

• Last.fm Rotation Plugin Project Lastfm-Rotation Plugin: version 1.0 only

Published 2014-08-06. Last modified 2026-06-17.