Soundcloud IS Gold vulnerabilities | LiveThreat CVE Feed

Product

Soundcloud IS Gold

by Mightymess · last CVE Sep 26, 2019

CVEs

On KEV

6.1

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 1Low 0

Severity

Exploitation

Watch

Add Soundcloud IS Gold to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-9420	6.1	1%	Sep 26	The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter Affected: before 2.3.2
CVE-2012-6624	–	4%	Jan 16	Cross-site scripting (XSS) vulnerability in the SoundCloud Is Gold plugin 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter… Affected: 2.1