Westerndeal Advanced Dewplayer vulnerabilities

2 vulnerabilities

Known vulnerabilities in Westerndeal Advanced Dewplayer, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2013-7240chainguardwordpress+6
EPSS score
19.64%
Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dew_file parameter.5.3CVE-2025-30592westerndealadvanced_dewplayer+1
EPSS score
0.38%
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through <= 1.6.