CW
Product
Compact WP Audio Player
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add Compact WP Audio Player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-24735 | 6.5 | Oct 18 | The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Disable Simultaneous… Affected: before 1.9.7 |
| CVE-2024-10176 | 6.4 | Oct 24 | Compact WP Audio Player <= 1.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_embed_player Shortcode Affected: through 1.9.13 |
| CVE-2022-4542 | 5.4 | Jan 23 | Compact WP Audio Player < 1.9.8 - Contributor+ Stored XSS Affected: before 1.9.8 |
| CVE-2021-24734 | 5.4 | Oct 18 | The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as Contributor to perform… Affected: before 1.9.7 |
Showing 4