WordPress security by component
Xspf Player Plugin
Plugin description
Xspf Player Plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 10, 2013; the highest CVE/CNA score is 7.5.
Plugin slug:
xspf-player-pluginLatest vulnerability
CVE-2013-3530: Xspf Player Plugin: SQL injection
Xspf Player Plugin is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
| Safe version |
|
||
|---|---|---|---|
| May 10, 2013 |
CVE-2013-3530
Xspf Player Plugin: SQL injection
Xspf Player Plugin is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.5
NVD7.5
|