smartwpress vulnerabilities
5 published CVEs name smartwpress among the affected products.
- Published CVEs
- 5
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 5Low 0Not scored 0
CVEs per yearBy the year they were published
- 20242
- 20252
- 20261
Newest CVEs
- CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2025-5340
Music Player for Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via album_buy_url Parameter
smartwpress · Music Player for Elementor – Audio Player & Podcast Player
Medium6.4 - CVE-2025-32190
WordPress Musician's Pack For Elementor plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability
smartwpress · Musician's Pack For Elementor
Medium6.5 - CVE-2024-10582
Music Player for Elementor – Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import
smartwpress · Music Player for Elementor – Audio Player & Podcast Player
Medium4.3 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3