CVE-2021-24735

Name of the Vulnerable Software and Affected Versions: Compact WP Audio Player versions prior to 1.9.7

Description: The issue concerns the lack of nonce checks in the Compact WP Audio Player WordPress plugin, which could allow attackers to make a logged-in admin change the Disable Simultaneous Play setting via a CSRF attack.

Recommendations: For versions prior to 1.9.7, update to version 1.9.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's settings to minimize the risk of exploitation.