smartwpress
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Music Player for Elementor – Audio Player & Podcast Player | 2 | – | Jun 3, 2025 |
| Musician's Pack For Elementor | 1 | – | Apr 4, 2025 |
Exploited and recent CVEs
- CVE-2025-5340 Music Player for Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via album_buy_url Parameter 0.3%
- CVE-2025-32190 WordPress Musician's Pack For Elementor plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-10582 Music Player for Elementor – Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import 0.3%