Tipsandtricks-hq
Tipsandtricks-hq Compact WP Audio Player: vulnerabilidades y CVE
Tipsandtricks-hq Compact WP Audio Player tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-56279 | Media (6.4) | 0.30% | — | 7 ene 2025 | Server-Side Request Forgery (SSRF) vulnerability in mra13 Compact WP Audio Player compact-wp-audio-player allows Server Side Request Forgery.This issue affects Compact WP Audio Player: from n/a through <= 1.9.14. |
| CVE-2024-10176 | Media (6.4) | 0.34% | — | 24 oct 2024 | The Compact WP Audio Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sc_embed_player shortcode in all versions up to, and including, 1.9.13 due to insufficient input… |
| CVE-2024-29917 | Media (6.5) | 0.32% | — | 27 mar 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Compact WP Audio Player allows Stored XSS.This issue affects Compact WP Audio Player: from n/a through 1.9.9. |
| CVE-2022-4542 | Media (5.4) | 0.47% | — | 23 ene 2023 | The Compact WP Audio Player WordPress plugin before 1.9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor… |
| CVE-2021-24735 | Media (6.5) | 0.57% | — | 18 oct 2021 | The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Disable Simultaneous Play" setting via a CSRF attack. |
| CVE-2021-24734 | Media (5.4) | 0.65% | — | 18 oct 2021 | The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. |
Otros productos de Tipsandtricks-hq
WP Affiliate Platform · 11ALL IN ONE WP Security & Firewall · 11WP Emember · 11Simple Download Monitor · 9WP Estore · 8Wordpress Simple Paypal Shopping Cart · 7WP Video Lightbox · 4WP Express Checkout · 4Software License Manager · 3Category Specific RSS Feed Subscription · 3Accept Stripe · 1Simple Photo Gallery · 1