CVE Database /
CVE-2024-56279
CVE · Medium
CVE-2024-56279 — Compact WP Audio Player [compact-wp-audio-player] < 1.9.15
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-56279
|
Compact WP Audio Player [compact-wp-audio-player] < 1.9.15 |
Server-Side Request Forgery (SSRF) |
Medium
6.4
|
< 1.9.15
|
1.9.15 |
2025-01-03 |
—
|
CVE-2024-56279
The Compact WP Audio Player plugin for WordPress contains a server-side request forgery vulnerability affecting versions 1.9.14 and earlier. Attackers with at least Contributor-level permissions can exploit this flaw to perform web requests to any target location from the server, potentially allowing them to access or alter data on internal services. The vulnerability has been addressed in version 1.9.15 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings