What’s Vulnerable › Products

Compact WP Audio Player vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Compact WP Audio Player version is affected

Latest Compact WP Audio Player vulnerabilities

• CVE-2024-56279 — WordPress Compact WP Audio Player plugin <= 1.9.14 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.4)
• CVE-2024-10176 — Compact WP Audio Player <= 1.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_embed_player Shortcode (CVSS 6.4)
• CVE-2022-4542 — Compact WP Audio Player < 1.9.8 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2021-24735 — Compact WP Audio Player < 1.9.7 - Setting Change via CSRF (CVSS 6.5)
• CVE-2021-24734 — Compact WP Audio Player < 1.9.7 - Contributor+ Stored Cross-Site Scripting (CVSS 5.4)