CVE-2014-9177

MEDIUM

The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote attackers to obtain the installation path via a request to html5plus/playlist.php.

Affects 1 product across 1 vendor.

CVSS 2.05.0
EPSS2.6%
Percentile85th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no integrity impact, no availability impact.
CWE Weakness Definitions
CWE-200: Exposure of Sensitive Information

Application reveals restricted data such as system internals, credentials, or user data to unauthorized actors.

Related Attack Patterns (CAPEC)
CAPEC-13 Subverting Environment Variable Values
via CWE-200
CAPEC-59 Session Credential Falsification through Prediction
via CWE-200
CAPEC-60 Reusing Session IDs (aka Session Replay)
via CWE-200
CAPEC-79 Using Slashes in Alternate Encoding
via CWE-200
CAPEC-285 ICMP Echo Request Ping
via CWE-200
Show all 59

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2014. A medium severity vulnerability affects Svnlabs systems (CVE-2014-9177). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2014-GLOBAL-265724-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2014-9177?
This vulnerability was disclosed in 2014. A medium severity vulnerability affects Svnlabs systems (CVE-2014-9177). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2014-9177?
CVE-2014-9177 has CVSS 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N. EPSS: 2.6%.
Is CVE-2014-9177 actively exploited?
No confirmed active exploitation of CVE-2014-9177 as of 2026-09-25.
How do I remediate CVE-2014-9177?
Priority: MONITOR. PSIRT: [email protected]
What systems are affected by CVE-2014-9177?
CVE-2014-9177 affects Svnlabs Html5 Mp3 Player With Playlist Free.
Vulnerability Details
CVE IDCVE-2014-9177
BSIDBS-2014-GLOBAL-265724-M BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Published2014-12-02
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
Exposure of Sensitive Information
SourceNVD
Official Description

The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote attackers to obtain the installation path via a request to html5plus/playlist.php.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote attackers to obtain the installation path via a request to html5plus/playlist.php. CVSS vector: AV:N/AC:L/Au:N/C:P/I:N/A:N.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Svnlabs Html5 Mp3 Player With Playlist Free ≤ 2.6
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 4335 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash4d922500e10b170251cce1471c8dfa34641dda0ae7f41fe6b3949fafd6724a573bc0492d91f5537a8203a95411c25e252bb121807cf1af5d49a1986b4e2974be
Related CVEs affecting Svnlabs
CVE-2023-52207 8.8 Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP... CVE-2023-52205 7.2 Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 So... CVE-2023-52202 7.2 Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP...
View all Svnlabs CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →