Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

HTML5 MP3 Player with Playlist Free Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 2 vulnerability records associated with HTML5 MP3 Player with Playlist Free, published between 2014 and 2024.

Dataset last synchronized: 2026-08-02 09:41:47 UTC

At a glance

Security Snapshot

2Total records
0Critical
1High
1Medium
0Low
0Informational
1Patched records
1Currently marked unpatched
2014-11-26First disclosure
2024-01-03Latest disclosure
2 of 2CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
201411 records
202411 records

Severity Breakdown

SeverityRecordsShare
High150%
Medium150%

Vulnerability-Type Breakdown

Information Disclosure

1 record50%

First: 2014. Latest: 2014.

Other

1 record50%

First: 2024. Latest: 2024.

Patch Status

Patched
1
Currently marked unpatched
1
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 2.8.0

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-3.0.0HTML5 MP3 Player with Playlist Free <= 3.0.0 - Authenticated (Author+) PHP Object InjectonJanuary 3, 2024Not suppliedHigh
*-2.7.0HTML5 MP3 Player with Playlist <= 2.7.0 - Full Path DisclosureNovember 26, 20142.8.0Medium

Selected source records

Latest Records

HighCVE-2023-52207

HTML5 MP3 Player with Playlist Free <= 3.0.0 - Authenticated (Author+) PHP Object Injecton

Published: January 3, 2024

Affected versions
*-3.0.0
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2014-9177

HTML5 MP3 Player with Playlist <= 2.7.0 - Full Path Disclosure

Published: November 26, 2014

Affected versions
*-2.7.0
Patched versions
2.8.0
Original Wordfence record

Highest-Severity Records

HighCVE-2023-52207

HTML5 MP3 Player with Playlist Free <= 3.0.0 - Authenticated (Author+) PHP Object Injecton

Published: January 3, 2024

Affected versions
*-3.0.0
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2014-9177

HTML5 MP3 Player with Playlist <= 2.7.0 - Full Path Disclosure

Published: November 26, 2014

Affected versions
*-2.7.0
Patched versions
2.8.0
Original Wordfence record

Currently Marked Unpatched Records

HighCVE-2023-52207

HTML5 MP3 Player with Playlist Free <= 3.0.0 - Authenticated (Author+) PHP Object Injecton

Published: January 3, 2024

Affected versions
*-3.0.0
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory