Skip to content
Sign in
5.4 Medium

CVE-2025-47472 Missing Authorization vulnerability in codepeople Music Player for WooCommerce music-player-for-woocommerce allows…

Description

Missing Authorization vulnerability in codepeople Music Player for WooCommerce music-player-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Music Player for WooCommerce: from n/a through <= 1.5.1.

Affected products and versions

Product Affected versions Fixed in
Music Player for WooCommerce 1.5 earliest → 1.5.1 No fix stated

Other CVEs of Music Player for WooCommerce

The 3 CVEs of Music Player for WooCommerce →
CVE-2026-93624 Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions 7.2 High CVE-2026-78283 Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions 7.1 High
Track this CVE