← All advisories

Medium severity6.5NVD Advisory· Published Apr 5, 2023· Updated Jun 17, 2026

CVE-2023-26536

CVE-2023-26536

Description

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.05 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Sp*tify Play Button for WordPressllm-create
Range: <=2.05
Jonk @ Follow me Darling/Sp*tify Play Button for WordPressv5
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/spotify-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-05-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.