smartwpress Music Player for Elementor – Audio Player & Podcast Player

• CVE-2025-5340 Medium 6.4 Music Player for Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via album_buy_url Parameter 0.3%
• CVE-2024-10582 Medium 4.3 Music Player for Elementor – Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import 0.3%