MP3-jPlayer

MP3-jPlayer has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2022; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2015 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2022.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all MP3-jPlayer vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8CVE-2022-36373

MP3 jPlayer <= 2.7.3 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

4 records


2022-09-01 00:00	MP3 jPlayer <= 2.7.3 - Cross-Site Request Forgery MP3-jPlayer <= 2.7.3	`CVE-2022-36373`	8.8 High	Rasi Afeef	No
2015-07-12 00:00	MP3-jPlayer <= 2.4.2 - Full Path Disclosure MP3-jPlayer < 2.5	`CVE-2015-1000008`	5.3 Medium	Larry W. Cashdollar	Yes
2015-01-05 00:00	MP3-jPlayer <= 1.8.11 - Cross-Site Scripting MP3-jPlayer <= 1.8.11	`N/A`	6.1 Medium	Kacper Szurek	Yes
2014-02-23 00:00	MP3-jPlayer < 1.8.8 - Cross-Site Scripting MP3-jPlayer < 1.8.8	`N/A`	7.1 High	HauntIT	Yes

Showing 1–4 of 4 reports