← WordPress Vulnerabilities
WordPress security by component

Mp3 Jplayer

Mp3 Jplayer is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Sep 01, 2022; the highest CVE/CNA score is 5.4.

Plugin slug: mp3-jplayer

CVE-2022-36373: Mp3 Jplayer: Cross-site request forgery

Mp3 Jplayer is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedSep 01, 2022
Safe version guidanceSee mitigation notes
Safe version
Sep 01, 2022 CVE-2022-36373
Mp3 Jplayer: Cross-site request forgery
Mp3 Jplayer is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE5.4
NVD8.8
Oct 06, 2016 CVE-2015-1000008
Mp3 Jplayer: A security weakness
Mp3 Jplayer is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVD5.3