Skip to content
Vulnerability intelligence

CVE-2014-125130: Google MP3 Audio Player path traversal

CVE-2014-125130 exposes wp-config.php to anyone. In our reading, its score understates what that file unlocks.

WordPress 2014
What WebPulse reported · 1 analysis
WordPress MP3 plugin flaw: exploitation seen in 2023, NVD entry in 2026

CVE-2014-125130 exposes wp-config.php to anyone. In our reading, its score understates what that file unlocks.

October 5, 2026
View CVE-2014-125130 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-60137 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795 CVE-2026-3844 CVE-2026-1293 CVE-2026-87902