Followmedarling

followmedarling

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Spotify Play Button For Wordpress

spotify-play-button-for-wordpress

Cookies And Content Security Policy

cookies_and_content_security_policy

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-51529 1Followmedarling 1Cookies And Content Security Policy Oct 21, 2025 Aug 19, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service (database server resource ex...Show more Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service (database server resource exhaustion) via unlimited database write operations to the wp_ajax_nopriv_cacsp_insert_consent_data endpoint.Show less
CVE-2023-40662 1Followmedarling 1Cookies And Content Security Policy Apr 28, 2026 Nov 30, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jonk @ Follow me Darling Cookies and Content Security Policy.This issue affects Cookies and Content Security Policy: from n/a through 2.15.
CVE-2023-26536 1Followmedarling 1Spotify Play Button For Wordpress Nov 21, 2024 Apr 5, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.05 versions.
CVE-2023-1840 1Followmedarling 1Spotify Play Button For Wordpress Apr 8, 2026 Apr 4, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 The Sptify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.07 due to insufficient input sanitization and output escaping...Show more The Sptify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.07 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.Show less