Meks Audio Player

Meks Audio Player has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Meks Audio Player has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Daffa. Meks Audio Player is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Meks Audio Player vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2023-25989

Meks Smart Social Widget <= 1.6 - Cross-Site Request Forgery via meks_remove_notification

Read the full analysis

Vulnerability Records

1 records
Meks Audio Player banner
Latestv1.3

Meks Audio Player

Meks

Author

Meks

4.0(5)
80/100
Last Updated
2024-07-29 (2y ago)
Active Installs
1,000+
Downloads
33,542
Requires WP
5.5+
Requires PHP
0+
Tested up to
WP 6.6.7
Created
2019-09-02 (7y ago)

Easily enhance your podcast, music or any audio on the website. Meks Audio Player is first created as a support for our Megaphone theme but now it can be used on any WordPres website. The plugin will automatically detect audio inside the content and play it in a full-featured sticky audio player. Several smart options are provided to fine-tune the functionality as you wish. Perfect for personal podcasts, podcasting networks, radio stations or music websites. Meks Audio Player WordPress plugin is created by Meks Features Color options to style the player to your personal taste and theme design Player Timestamps block ( Navigate audio with timestamps. Set the timestamp and the equivalent title/name. ) Options to fully customize the player controls that you like to display: play/pause, skip back, jump forward, duration/progress bar, current time, duration time, mute/volume, playback speed… No setup required, it simply detects your existing audio inside the content Supports WordPress native audio block and audio shortcode Works on post and pages as well as all other registered custom post types on the website Hooks and filters provided for an elegant way to modify the plugin through your own WordPress theme or a plugin More features? By using the plugin with our Megaphone WordPress theme, you can also: Get more styling options Display the post title inside the player Autodetect third-party embeds (i.e. SoundCloud, Spotify, YouTube, etc…) Run the player from any page on the website (not only from single posts but from archives too)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C