Followmedarling Spotify-play-button-for-wordpress — known CVE vulnerabilities

Every CVE whose affected-product data names Followmedarling Spotify-play-button-for-wordpress, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-26536 — CVSS 6.5 (medium): Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.05…
• CVE-2023-1840 — CVSS 4.4 (medium): The Sp*tify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up…