What’s Vulnerable › Products

smartwpress Music Player for Elementor – Audio Player & Podcast Player vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your smartwpress Music Player for Elementor – Audio Player & Podcast Player version is affected

Latest smartwpress Music Player for Elementor – Audio Player & Podcast Player vulnerabilities

• CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
• CVE-2025-5340 — Music Player for Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via album_buy_url Parameter (CVSS 6.4)
• CVE-2024-10582 — Music Player for Elementor – Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import (CVSS 4.3)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)