Compact WP Audio Player
Compact WP Audio Player has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 6 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 4 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF), Server-Side Request Forgery (SSRF).
Every one of the 6 issues recorded for Compact WP Audio Player has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, most of them (2) reported by apple502j. Compact WP Audio Player is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-56279Compact WP Audio Player <= 1.9.14 - Authenticated (Contributor+) Server-Side Request Forgery
Read the full analysisVulnerability Records
Compact WP Audio Player
Author
mra13 / Team Tips and Tricks HQ
Compact WordPress Audio Player plugin is an HTML5 + Flash hybrid based wordpress plugin which can be used to embed an mp3 audio file on your WordPress post or page using a shortcode. The audio player is cute and compact and will play on all major browsers. This audio player plugin Supports .mp3 and .ogg file formats. The audio files that you embed using this plugin will work on all devices. Features The audio player is compact so it does not take a lot of real estate on your webpage HTML5 compatible so the audio files embedded with this plugin will play on iOS devices Works on all major browsers – IE7, IE8, IE9, Safari, Firefox, Chrome The audio player is responsive. If you do podcasting then this audio player can be used to embed the audio files on your WordPress posts or pages If you are selling audio files from your site then you can use this plugin to offer a preview Add the audio player to any post/page using shortcode Use autoplay option to play an audio/mp3 file as soon as the page loads Ability to specify both the mp3 and ogg version of your audio files. The plugin will play the appropriate one based on the device. More details can be found on the Compact Audio Player Plugin Page Usage Use the following shortcode to embed an audio file anywhere on your site [sc_embed_player fileurl=”URL OF THE MP3 FILE”] Example shortcode: [sc_embed_player fileurl=”http://www.example.com/wp-content/uploads/my-music/mysong.mp3″]
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C