CVE-2015-4414: SE HTML5 Album Audio Player Project SE HTML5 Album Audio Player

Medium severity, CVSS 5.0. EPSS: 18.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in download_audio.php in the SE HTML5 Album Audio Player (se-html5-album-audio-player) plugin 1.1.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Affected products

• SE HTML5 Album Audio Player Project SE HTML5 Album Audio Player: up to and including 1.1.0

Published 2015-06-17. Last modified 2026-06-17.