CVE-2013-3530: Fabricio Zuardi Xspf Player Plugin

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the playlist_id parameter.

Affected products

• Fabricio Zuardi Xspf Player Plugin: version 0.1 only

Published 2013-05-10. Last modified 2026-06-16.