Tipsandtricks-Hq Compact Wp Audio Player
3 CVEs affecting Tipsandtricks-Hq Compact Wp Audio Player. Latest disclosed: 2023-01-23. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24735 | Medium | 6.5 | 2021-10-18 | The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Di… |
CVE-2022-4542 | Medium | 5.4 | 2023-01-23 | The Compact WP Audio Player WordPress plugin before 1.9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page… |
CVE-2021-24734 | Medium | 5.4 | 2021-10-18 | The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as Cont… |