CVE-2021-24735
18.10.2021, 14:15
The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Disable Simultaneous Play" setting via a CSRF attack.
| Vendor | Product | Version |
|---|---|---|
| tipsandtricks-hq | compact_wp_audio_player | 𝑥 < 1.9.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration