CVE-2013-1464: Doryphores Audio Player

Medium severity, CVSS 4.3. EPSS: 6.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter.

Affected products

• Doryphores Audio Player: up to and including 2.0.4.5; version 2.0.1.0 only; version 2.0.2.0 only; version 2.0.3.0 only; version 2.0.3.1 only; version 2.0.4.0 only; …

Published 2013-02-07. Last modified 2026-06-16.