Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Sp*tify Play Button for WordPress — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Sp*tify Play Button for WordPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: jonkastonka

CVE IDTitleCVSSSeverityPublished
CVE-2024-11192 Spotify Play Button for WordPress <= 2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via spotifyplaybutton Shortcode CWE-79 6.4 Medium2024-11-26
CVE-2023-41131 WordPress Sp*tify Play Button for WordPress Plugin <= 2.10 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium2023-10-12
CVE-2023-26536 WordPress Sp*tify Play Button for WordPress Plugin <= 2.05 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium2023-04-05
CVE-2023-1840 Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting CWE-79 4.4 Medium2023-04-04

All 4 known CVE vulnerabilities affecting Sp*tify Play Button for WordPress with full Chinese analysis, references, and POCs where available.