CVE-2018-6001: Webartisan Soundy Audio Playlist

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The Soundy Audio Playlist plugin 4.6 and below for WordPress has Cross-Site Scripting via soundy-audio-playlist\templates\front-end.php (war_sdy_pl_preview parameter).

Affected products

• Webartisan Soundy Audio Playlist: up to and including 4.6

Published 2018-01-22. Last modified 2026-06-17.