Vulnerabilities > Doryphores

DATE CVE VULNERABILITY TITLE RISK
2013-02-07 CVE-2013-1464 Cross-Site Scripting vulnerability in Doryphores Audio Player
Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter.
4.3