Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-115497— Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter

Quick assessment

Affected
codepeople Music Store – WordPress eCommerce
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 电子商务插件"Music Store"在所有 1.4.7 及之前的版本中，存在目录遍历漏洞，攻击路径通过参数"f"实现。该漏洞允许未认证的攻击者读取服务器上的任意文件内容，这些文件可能包含敏感信息。利用该漏洞需要一个有效的 purchase_id 令牌，而任何用户均可通过进行一次低价购买或接收一个共享的下载链接来获取该令牌。

CVSS 7.5 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-115497

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires a valid purchase_id token, which any user can obtain by making a single low-cost purchase or receiving a shared download link.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
codepeople Music Store – WordPress eCommerce 0 ~ 1.4.7 -

II. Public POCs for CVE-2026-115497

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-115497

请登录查看更多情报信息。

Other References for CVE-2026-115497 (6)

IV. Related Vulnerabilities

Same vendor: codepeople
Same weakness: CWE-22

V. Comments for CVE-2026-115497

No comments yet

Leave a comment