CVE-2014-125130

Summary

The vulnerability allows remote attackers to read arbitrary files on the server by exploiting a path traversal flaw in the Google MP3 Audio Player plugin's direct_download.php endpoint. This enables attackers to access sensitive configuration files like wp-config.php without authentication, potentially leading to complete site compromise.

Exploitability

The exploit is straightforward to execute with no authentication required, needing only a simple HTTP request to the vulnerable endpoint with a crafted path traversal payload.

Blast radius

The vulnerability affects WordPress sites running version 1.0.11 or earlier of the Google MP3 Audio Player plugin, potentially exposing database credentials and secret keys that could lead to full site takeover.

Detection

Monitor for HTTP GET requests to /wp-content/plugins/google-mp3-audio-player/direct_download.php with suspicious path traversal patterns in the 'file' parameter, particularly those containing '../' sequences that attempt to access wp-config.php or other sensitive files.

Prioritized remediation

Upgrade to version 1.0.12 or later of the google-mp3-audio-player plugin, as this version contains the fix for the path traversal vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.