Lucene search

CVE-2024-11192 Spotify Play Button for WordPress <= 2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via spotifyplaybutton Shortcode

🗓️ 26 Nov 2024 08:54:31Reported by WordfenceType

Spotify Play Button for WordPress <= 2.11 Authenticated Stored XS

Reporter	Title	Published	Views	Family All 5
Patchstack	WordPress Sp*tify Play Button for WordPress Plugin <= 2.11 is vulnerable to Cross Site Scripting (XSS)	25 Nov 202400:00	–	patchstack
CVE	CVE-2024-11192	26 Nov 202409:15	–	cve
Cvelist	CVE-2024-11192 Spotify Play Button for WordPress <= 2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via spotifyplaybutton Shortcode	26 Nov 202408:31	–	cvelist
NVD	CVE-2024-11192	26 Nov 202409:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 25, 2024 to December 1, 2024)	5 Dec 202415:44	–	wordfence

Source	Link
wordpress	www.wordpress.org/plugins/spotify-play-button-for-wordpress/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a52e43dd-46b4-445b-b350-a2fd76315869
plugins	www.plugins.trac.wordpress.org/browser/spotify-play-button-for-wordpress/tags/2.11/sptify-play-button-for-wordpress.php
plugins	www.plugins.trac.wordpress.org/browser/spotify-play-button-for-wordpress/tags/2.11/sptify-play-button-for-wordpress.php
plugins	www.plugins.trac.wordpress.org/changeset

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Nov 2024 08:31Current

5.7Medium risk

Vulners AI Score5.7

CVSS36.4

EPSS0.000

CWE-79