Medium 6.4
2024-11-26< 2.12
CVE-2024-11192
Minimum safe version
2.12
Update to 2.12 or later to address 5 fixable vulnerabilities
CVE-2024-11192
CVE-2023-41131
WordPress Sp*tify Play Button for WordPress Plugin <= 2.07 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-26536
Sp*tify Play Button for WordPress <= 2.05 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode