CVE-2015-9420: Mightymess Soundcloud Is Gold

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter.

Affected products

• Mightymess Soundcloud Is Gold: before 2.3.2 (fixed in 2.3.2)

Published 2019-09-26. Last modified 2026-06-17.