WordPress plugin
Compact WP Audio Player security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium6
- Low0
All Compact WP Audio Player vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Server-Side Request Forgery ≤1.9.14Update to 1.9.15 | CVE-2024-56279 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via sc_embed_player Shortcode ≤1.9.13Update to 1.9.14 | CVE-2024-10176 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via fileurl ≤1.9.9Update to 1.9.10 | CVE-2024-29917 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.9.7Update to 1.9.8 | CVE-2022-4542 | |
| Medium4.3 | Setting Change via Cross-Site Request Forgery ≤1.9.6Update to 1.9.7 | CVE-2021-24735 | |
| Medium6.4 | Contributor+ Stored Cross-Site Scripting ≤1.9.6Update to 1.9.7 | CVE-2021-24734 |
- Medium6.4Authenticated (Contributor+) Server-Side Request Forgery
≤1.9.14Update to 1.9.15
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via sc_embed_player Shortcode
≤1.9.13Update to 1.9.14
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via fileurl
≤1.9.9Update to 1.9.10
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.9.7Update to 1.9.8
- Medium4.3Setting Change via Cross-Site Request Forgery
≤1.9.6Update to 1.9.7
- Medium6.4Contributor+ Stored Cross-Site Scripting
≤1.9.6Update to 1.9.7
Compact WP Audio Player: common questions
Does Compact WP Audio Player have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Compact WP Audio Player: 6 medium. None are known to affect version null.
How do I check which version of Compact WP Audio Player I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Compact WP Audio Player vulnerability?
CVE-2024-56279, published Jan 3, 2025: Compact WP Audio Player <= 1.9.14 - Authenticated (Contributor+) Server-Side Request Forgery. Severity: Medium (CVSS 6.4).
Is any Compact WP Audio Player vulnerability listed in CISA KEV?
No. None of the known Compact WP Audio Player vulnerabilities is currently listed in the CISA KEV catalog.