CVE-2021-24735: vulnerability in Compact WP Audio Player
Compact WP Audio Player < 1.9.7 - Setting Change via CSRF
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.6%
The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Disable Simultaneous Play" setting via a CSRF attack.
Affected products
Unknown · Compact WP Audio PlayerRelated CVEs — Compact WP Audio Player
In the same product, most dangerous first.