High · 8.8 CVE-2024-56203 EUVD-2024-53002GHSA-f727-vjvm-gj23

WordPress Wayne Audio Player plugin <= 1.0 - CSRF to Privilege Escalation vulnerability

Published Dec 31, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: gholme4 Product: Wayne Audio Player

Description

Cross-Site Request Forgery (CSRF) vulnerability in gholme4 Wayne Audio Player wayne-audio-player allows Privilege Escalation.This issue affects Wayne Audio Player: from n/a through <= 1.0.

Affected products

Vendor	Product	Affected	Fixed
gholme4	Wayne Audio Player	≤ 1.0	—

References

https://patchstack.com/database/Wordpress/Plugin/wayne-audio-player/vulnerability/wordpress-wayne-audio-player-plugin-1-0-csrf-to-privilege-escalation-vulnerability?_s_id=cve vdb-entry