Compact Wp Audio Player (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-01-23. Vendor: Unknown.

CVEs of Compact Wp Audio Player

• CVE-2022-4542 - CVSS 5.4 (medium), 2023-01-23: The Compact WP Audio Player WordPress plugin before 1.9.8 does not validate and escape some of its shortcode attributes before outputting them back in the…
• CVE-2021-24735 - CVSS 6.5 (medium), 2021-10-18: The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the…
• CVE-2021-24734 - CVSS 5.4 (medium), 2021-10-18: The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as…