Vulnerabilities

TI-2023-11673 CVE-2023-26536 · GHSA-6mx3-m2xg-8wr8

WordPress Sp*tify Play Button for WordPress Plugin <= 2.05 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.05 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0037 Published 2023-04-05 No fix listed CWE-79

TI-2023-01728 CVE-2023-1840 · GHSA-wpcc-gp5g-rr4p

Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting

LOW 22

The Sp*tify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.07 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00352 Published 2023-04-04 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Sp*tify Play Button for WordPress Plugin <= 2.05 is vulnerable to Cross Site Scripting (XSS)

Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting