CP Media Player – Audio Player and Video Player

CP Media Player – Audio Player and Video Player has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for CP Media Player – Audio Player and Video Player has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. CP Media Player – Audio Player and Video Player is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all CP Media Player – Audio Player and Video Player vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-78281

CP Media Player – Audio Player and Video Player <= 1.3.0 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
CP Media Player – Audio Player and Video Player banner
Latestv1.3.1

CP Media Player – Audio Player and Video Player

codepeople

Author

codepeople

4.4(46)
88/100
Last Updated
2026-08-19 (25d ago)
Active Installs
3,000+
Downloads
291,849
Requires WP
3.0.5+
Requires PHP
0+
Tested up to
WP 7.1
Created
2012-12-02 (14y ago)

CP Media Player – Audio and Video Player features: ♪ Publish Audio and Video players anywhere ♪ Support for audio and video files: MP4, OGG, WebM, MP3, M4A, WAV ♪ Support WebSRT subtitle files ♪ Allow playlist ♪ Allow downloading ♪ Supported most popular browsers: Edge, Firefox, Chrome, Safari, Opera, Brave, IE… ♪ Supported by mobile devices: iPhone, iPad, and Android devices CP Media Player – Audio and Video Player allows playing multiple file formats: MP4, OGG, WebM, MP3, WAV, and loading WebSRT subtitle files. CP Media Player – Audio and Video Player is based on MediaElement.js, supporting all browsers that implement the HTML5 standard. To make the players responsive, essential in mobile devices, enter the player’s width in percentage, Ex. 100% Other Features Allows publishing audio and video players anywhere(posts, pages, or directly on template files). Support popular audio and video files: MP4, M4A, OGG, WebM, MP3, WAV, and WebSRT subtitle files. Includes several skins with the audio and video player. Supports most browsers on the web: Edge, Firefox, Chrome, Safari, Opera, Brave, IE, etc. As well as mobile devices such as iPhone, iPad, and Android. The plugin allows you to associate directories to the players to generate playlists with the contained media files (use “/” to load all media files in the “Uploads” directory and subdirectories). Premium Features Premium features are available in the pro version to extend the capabilities of the plugin: Allows protecting the audio files. If FFmpeg is installed on the server, the plugin allows you to protect the audio files by embedding a watermark audio layer and generating truncated copies of files for demos. Allows selling files from the player. It uses PayPal as the payment gateway. Payments are SCA ready (Strong Customer Authentication), compatible with the new Payment services (PSD 2) – Directive (EU) Includes sales reports. The plugin includes the integration with the following editors: Gutenberg Editor. Classic WordPress Editor. Elementor. For other editors, insert the player’s shortcodes into general-purpose blocks orm modules, like text or HTML. Demo of Premium Version of Plugin https://demos.dwbooster.com/audio-and-video/wp-login.php https://demos.dwbooster.com/audio-and-video/ Additional details about the “CP Media Player – Audio and Video Player” plugin by visiting its website: https://cpmediaplayer.dwbooster.com Using the Music and Video Player Generating the players directly on the pages and posts Audio players Video Player It is possible to generate the player by coding entering the player and items shortcodes into the page’s content: [cpm-player skin="ball-skin" width="100%" playlist="true" type="audio"] [cpm-item file="http://www.wp.local/wp-content/uploads/2018/11/1.mp3"]Audio 1[/cpm-item] [cpm-item file="http://www.wp.local/wp-content/uploads/2018/11/2.mp3"]Audio 2[/cpm-item] [cpm-item file="http://www.wp.local/wp-content/uploads/2018/11/3.mp3"]Audio 3[/cpm-item] [/cpm-player] To generate the player loading the audio files from the “/wp-content/uploads/2020” directory: [cpm-player skin="ball-skin" width="100%" playlist="true" type="audio" dir="2020" /] The player can load the audio files indicating the directory only. It allows you to add new files to the directory or delete the existing ones, and the player will update the playlist dynamically. The complete list of attributes supported by the shortcodes is available on the documentation page of the plugin. Generating the audio and video players from the players gallery To make the players responsive, essential in mobile devices, enter the player’s width in percentage, Ex. 100% Configure the players from the gallery allows you to insert the same player on multiple websites’ pages or posts. The detailed description of the players’ settings is available in the following link: Creating the players through the players’ gallery The premium version of CP Media Player – Audio and Video Player allows you to sell files from the players. Configuring the integration with PayPal. Other recommended plugins Music Player for WooCommerce Music Player for Easy Digital Downloads

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C