Skip to content

Known vulnerabilities in smartwpress Music Player for Elementor – Audio Player & Podcast Player

Is your version affected?

CVE Summary Score Published
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Medium May 1, 2026
CVE-2025-5340 The Music Player for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘album_buy_url’… 6.4 Medium Jun 3, 2025
CVE-2024-10582 The Music Player for Elementor – Audio Player & Podcast Player plugin for WordPress is vulnerable to unauthorized… 4.3 Medium Nov 15, 2024
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium Oct 16, 2024

Other smartwpress products