[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEyLB69Sii-TUyMW6G1vaRo2OECsN32gmG1Tfa858p6k":3,"$fXmv0P7WLn3mj9qblWysi0gRzqbeVCF8mikHxNw6b0mk":339,"$fnxsmuKhcZcqbqjSE4S8E60FVtDPaj54BnIuvYjOhPj4":343},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"discovery_status":32,"vulnerabilities":33,"developer":73,"crawl_stats":39,"alternatives":81,"analysis":186,"fingerprints":318},"tune-library","Tune Library","1.6.4","Yannick Lefebvre","https:\u002F\u002Fprofiles.wordpress.org\u002Fjackdewey\u002F","\u003Cp>This plugin is used to import an XML iTunes Music Library file into your WordPress database. Once imported, you can display a complete listing of your music collection on a page of your WordPress site.\u003C\u002Fp>\n\u003Cp>You can try it out in a temporary copy of WordPress \u003Ca href=\"https:\u002F\u002Fdemo.tastewp.com\u002Ftune-library\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n","Import your iTunes music list into Wordpress and display your song collection on any page.",10,12364,80,1,"2026-02-01T15:41:00.000Z","6.9.4","2.7","",[20,21,22,23,24],"collection","itunes","list","music","xml","https:\u002F\u002Fylefebvre.github.io\u002Fwordpress-plugins\u002Ftune-library\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftune-library.1.6.4.zip",93,2,0,"2026-02-05 00:00:00","2026-04-06T09:54:40.288Z","no_bundle",[34,56],{"id":35,"url_slug":36,"title":37,"description":38,"plugin_slug":4,"theme_slug":39,"affected_versions":40,"patched_in_version":6,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":14,"patch_diff_files":48,"patch_trac_url":39,"research_status":49,"research_verified":50,"research_rounds_completed":51,"research_plan":52,"research_summary":39,"research_vulnerable_code":39,"research_fix_diff":39,"research_exploit_outline":39,"research_model_used":53,"research_started_at":54,"research_completed_at":55,"research_error":39,"poc_status":39,"poc_video_id":39,"poc_summary":39,"poc_steps":39,"poc_tested_at":39,"poc_wp_version":39,"poc_php_version":39,"poc_playwright_script":39,"poc_exploit_code":39,"poc_has_trace":50,"poc_model_used":39,"poc_verification_depth":39},"CVE-2026-1401","tune-library-missing-authorization-to-authenticated-subscriber-stored-cross-site-scripting-via-csv-import","Tune Library \u003C= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via CSV Import","The Tune Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CSV import in all versions up to, and including, 1.6.3. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page. The vulnerability exists because the CSV import functionality lacks authorization checks and doesn't sanitize imported data, which is later rendered without escaping through the [tune-library] shortcode.",null,"\u003C=1.6.3","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2026-02-06 06:46:32",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fcd600810-b1bc-4025-b441-5c90da7240de?source=api-prod",[],"researched",false,3,"# Exploitation Research Plan: CVE-2026-1401 (Tune Library \u003C= 1.6.3)\n\n## 1. Vulnerability Summary\nThe **Tune Library** plugin for WordPress is vulnerable to **Stored Cross-Site Scripting (XSS)** due to a lack of authorization checks and improper sanitization in its CSV import functionality. While intended for administrators, the import logic is accessible to any authenticated user (including Subscriber level) because it fails to verify user capabilities. Furthermore, data imported from the CSV is stored in the database and later rendered by the `[tune-library]` shortcode without sufficient escaping, allowing an attacker to execute arbitrary JavaScript in the context of any user viewing a page where the shortcode is present.\n\n## 2. Attack Vector Analysis\n*   **Vulnerable Endpoint**: Likely an AJAX action or an `admin_init` hook handling CSV processing. Based on common patterns in this plugin, the target is likely `admin-ajax.php` with a specific action related to CSV importing.\n*   **Action Name**: `tune_library_import_csv` or `tune_library_process_csv` (inferred).\n*   **Payload Parameter**: A `$_FILES` upload containing a `.csv` file with an XSS payload in one of the columns (e.g., `artist`, `title`, or `album`).\n*   **Authentication**: Required (Subscriber level or higher).\n*   **Preconditions**: The plugin must be active. To trigger the XSS, a page containing the `[tune-library]` shortcode must be visited.\n\n## 3. Code Flow (Inferred)\n1.  **Entry Point**: A user sends a POST request to `wp-admin\u002Fadmin-ajax.php` with `action=tune_library_import_csv`.\n2.  **Missing Check**: The handler function (e.g., `tune_library_import_handler()`) lacks a `current_user_can('manage_options')` check, allowing Subscribers to trigger the function.\n3.  **Processing**: The function reads the uploaded CSV file. It iterates through the rows and saves them to a custom table (e.g., `{$wpdb->prefix}tune_library`) or an option. It fails to use `sanitize_text_field()` or similar on the CSV column data.\n4.  **Storage**: The malicious payload `\u003Cscript>alert(1)\u003C\u002Fscript>` is saved into the database.\n5.  **Sink**: A user visits a page with the `[tune-library]` shortcode. The shortcode callback function (e.g., `tune_library_shortcode_renderer()`) fetches the rows from the database and echoes them directly or inside an HTML table without using `esc_html()` or `esc_attr()`.\n\n## 4. Nonce Acquisition Strategy\nIf the plugin uses `wp_localize_script` to provide a nonce for the import interface, the agent should:\n1.  **Identify Script Localization**: Look for `wp_localize_script` in the plugin code (e.g., `tune-library-admin.php`). \n2.  **Determine Variable**: Identify the JS object and key (e.g., `tuneLibraryAdmin.importNonce`).\n3.  **Create Access Point**: If the script only loads on the plugin's admin page, use a Subscriber account to attempt to access the admin area. Note that even if the Subscriber cannot see the full UI, the script might still be enqueued on `admin-ajax.php` or `wp-admin\u002F`.\n4.  **Browser Evaluation**:\n    *   Navigate to the WordPress Dashboard as a Subscriber.\n    *   Run: `browser_eval(\"window.tuneLibraryAdmin?.importNonce || window.tune_library_settings?.nonce\")`\n5.  **Bypass Check**: If `check_ajax_referer` is called with the third parameter set to `false` and the return value is not checked, the nonce can be omitted or sent with an invalid value.\n\n## 5. Exploitation Strategy\n### Step 1: Prepare the Malicious CSV\nCreate a file named `xss.csv` with the following content:\n```csv\nartist,title,album,year\n\"\u003Cimg src=x onerror=alert('XSS_SUCCESS')>\",Test Song,Test Album,2024\n```\n\n### Step 2: Perform the Import (As Subscriber)\nSend the multipart POST request to `admin-ajax.php`.\n\n*   **URL**: `http:\u002F\u002Flocalhost:8888\u002Fwp-admin\u002Fadmin-ajax.php`\n*   **Method**: `POST`\n*   **Headers**: `Content-Type: multipart\u002Fform-data`\n*   **Body Parameters**:\n    *   `action`: `tune_library_import_csv` (inferred)\n    *   `_wpnonce`: `[EXTRACTED_NONCE]` (if required)\n    *   `csv_file`: `[FILE_CONTENT:xss.csv]`\n\n### Step 3: Trigger the Payload\nCreate a public page with the `[tune-library]` shortcode and navigate to it.\n\n## 6. Test Data Setup\n1.  **Subscriber User**: Create a user with the `subscriber` role.\n    *   `wp user create attacker attacker@example.com --role=subscriber --user_pass=password123`\n2.  **Target Page**: Create a page that renders the library.\n    *   `wp post create --post_type=page --post_title=\"Music Library\" --post_status=publish --post_content='[tune-library]'`\n3.  **Identify Action**: Use `grep -r \"wp_ajax_\" wp-content\u002Fplugins\u002Ftune-library\u002F` to find the exact action name for CSV import.\n\n## 7. Expected Results\n*   The import request should return a successful status (e.g., `{\"success\": true}` or `1`).\n*   When navigating to the \"Music Library\" page, an alert box with `XSS_SUCCESS` should appear.\n*   The HTML source of the page should contain the raw, unescaped `\u003Cimg>` tag within the library table\u002Flist.\n\n## 8. Verification Steps\n1.  **Database Check**: Verify the payload is stored in the database.\n    *   `wp db query \"SELECT * FROM wp_tune_library WHERE artist LIKE '%onerror%';\" --allow-root`\n2.  **HTTP Response Check**: Use the `http_request` tool to fetch the \"Music Library\" page and check for the payload in the raw HTML.\n    *   `grep \"\u003Cimg src=x onerror=alert('XSS_SUCCESS')>\"` in the response body.\n\n## 9. Alternative Approaches\n*   **Option-based Storage**: If the plugin stores data in `wp_options` instead of a custom table, use `wp option get tune_library_data` to verify the injection.\n*   **Attribute Breakout**: If the data is rendered inside an attribute (e.g., `\u003Cdiv data-artist=\"VALUE\">`), use a payload like `\">\u003Cscript>alert(1)\u003C\u002Fscript>` to break out of the attribute context.\n*   **Missing Nonce**: If no nonce is found in the code via `grep`, skip the nonce acquisition step and send the request without the `_wpnonce` parameter.","gemini-3-flash-preview","2026-04-21 04:14:02","2026-04-21 04:14:54",{"id":57,"url_slug":58,"title":59,"description":60,"plugin_slug":4,"theme_slug":39,"affected_versions":61,"patched_in_version":62,"severity":63,"cvss_score":64,"cvss_vector":65,"vuln_type":66,"published_date":67,"updated_date":68,"references":69,"days_to_patch":71,"patch_diff_files":72,"patch_trac_url":39,"research_status":39,"research_verified":50,"research_rounds_completed":29,"research_plan":39,"research_summary":39,"research_vulnerable_code":39,"research_fix_diff":39,"research_exploit_outline":39,"research_model_used":39,"research_started_at":39,"research_completed_at":39,"research_error":39,"poc_status":39,"poc_video_id":39,"poc_summary":39,"poc_steps":39,"poc_tested_at":39,"poc_wp_version":39,"poc_php_version":39,"poc_playwright_script":39,"poc_exploit_code":39,"poc_has_trace":50,"poc_model_used":39,"poc_verification_depth":39},"CVE-2015-3314","tune-library-sql-injection","Tune Library \u003C 1.5.5 - SQL Injection","SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.","\u003C1.5.5","1.5.5","critical",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","2015-04-20 00:00:00","2024-01-22 19:56:02",[70],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F23aa8a2f-9238-4d93-b2d2-de7838ccb156?source=api-prod",3200,[],{"slug":74,"display_name":7,"profile_url":8,"plugin_count":75,"total_installs":76,"avg_security_score":77,"avg_patch_time_days":78,"trust_score":79,"computed_at":80},"jackdewey",8,10960,91,498,73,"2026-07-14T23:55:03.734Z",[82,98,123,144,164],{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":11,"downloaded":90,"rating":29,"num_ratings":29,"last_updated":91,"tested_up_to":92,"requires_at_least":92,"requires_php":18,"tags":93,"homepage":94,"download_link":95,"security_score":96,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":97},"itunes-data","iTunes-Data","1.0","mithra62","https:\u002F\u002Fprofiles.wordpress.org\u002Fmithra62\u002F","\u003Cp>Displays data from an itunes xml file as a sidebar. Blog administrators can upload a zip file or a stand alone xml file for parsing.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Future Releases\u003C\u002Fstrong>\u003Cbr \u002F>\n* Only bug fixes\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Bugs\u003C\u002Fstrong>\u003Cbr \u002F>\n* none\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Changelog\u003C\u002Fstrong>\u003Cbr \u002F>\n1.0 :: Release\u003C\u002Fp>\n","Displays data from an itunes xml file as a sidebar widget.",2398,"2009-03-16T15:39:00.000Z","2.7.1",[21,23,24],"http:\u002F\u002Fblog.ericlamb.net\u002Fitunes-data\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fitunes-data.zip",85,"2026-04-16T10:56:18.058Z",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":108,"num_ratings":109,"last_updated":110,"tested_up_to":16,"requires_at_least":111,"requires_php":112,"tags":113,"homepage":118,"download_link":119,"security_score":120,"vuln_count":121,"unpatched_count":29,"last_vuln_date":122,"fetched_at":97},"seriously-simple-podcasting","Seriously Simple Podcasting","3.14.4","Craig Hewitt","https:\u002F\u002Fprofiles.wordpress.org\u002Fpodcastmotor\u002F","\u003Cp>Seriously Simple Podcasting is a top-rated podcasting plugin for WordPress, built by \u003Ca href=\"https:\u002F\u002Fcastos.com\u002Fpodcast-hosting-wordpress\" rel=\"nofollow ugc\">Castos\u003C\u002Fa>. Using the onboarding wizard to start a podcast, multiple player options to display your podcast on your site, and multiple free extension modules to supercharge your content, Seriously Simple Podcasting powers over 30K+ podcasts.\u003C\u002Fp>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F560129506\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n\u003Cp>The plugin is, and will \u003Cem>always\u003C\u002Fem> remain, free to use. The only costs associated with using Seriously Simple Podcasting is if you choose to host your audio and video files with a dedicated podcast hosting provider, such as Castos. Similar to using a website hosting provider to keep your WordPress site fast and running smoothly, we recommend hosting podcast files with a dedicated provider. But remember, this isn’t required!\u003C\u002Fp>\n\u003Cp>Every plugin feature is fully functional, no matter who you choose as your podcast hosting provider. Seriously Simple Podcasting gives you maximum control over your content so you can start podcasting without limits.\u003C\u002Fp>\n\u003Cp>However, Castos is specifically designed to sync with Seriously Simple Podcasting to save you time in your publishing workflow. This means anytime you update your podcast’s information or upload a new episode file, the changes automatically sync with your Castos hosting account. You only have to do the action once, saving hours each week. Read more about how \u003Ca href=\"https:\u002F\u002Fcastos.com\u002Fhow-castos-and-seriously-simple-podcasting-work-together\u002F\" rel=\"nofollow ugc\">Castos and Seriously Simple Podcasting work together\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>With other podcast providers, you’ll need to make updates to your podcast’s RSS feed via your hosting provider account and again on WordPress to manually sync the information.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>HOW TO SET UP SERIOUSLY SIMPLE PODCASTING\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Getting started with Seriously Simple Podcasting is a seriously simple process. In just four steps, you’ll go from installing the plugin to your WordPress site to submitting a functioning RSS feed to every podcast directory.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F4Ekj4W9hljA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Col>\n\u003Cli>Install the Seriously Simple Podcasting plugin to your WordPress site.\u003C\u002Fli>\n\u003Cli>Begin the onboarding wizard, and create your first podcast. Here you’ll give details like the Podcast Title, Description, and upload your cover image.\u003C\u002Fli>\n\u003Cli>Then you can connect Seriously Simple Podcasting to your Castos account, if you’re hosting with Castos.  This offloads all of the file storage and delivery from your WordPress site and host.\u003C\u002Fli>\n\u003Cli>Last, it’s time to create your first podcast episode. You can do this either in the dedicated Podcasting section of your WordPress site, or in the regular Post area.\u003C\u002Fli>\n\u003Cli>Once your podcast is live it’s time to distribute it to podcasting directories like Apple Podcasts, Spotify, and other destinations.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>SERIOUSLY SIMPLE PODCASTING KEY FEATURES\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Seriously Simple Podcasting offers all of our advanced features through our free plugin. You’re not required to pay for additional add-ons or use a specific podcast hosting provider.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cem>MANAGE YOUR RSS FEED FROM WORDPRESS\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Seriously Simple Podcasting generates an RSS feed that’s fully compliant with Apple Podcasts, Spotify, Amazon Music, and every other listening platform.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Set your podcast’s title, subtitle, description, category, cover art, explicit rating, and copyright information from WordPress.\u003C\u002Fli>\n\u003Cli>Manage all updates to your podcast’s RSS feed from WordPress and changes automatically sync with your podcast hosting provider.\u003C\u002Fli>\n\u003Cli>Turbo-charge RSS feeds to increase the number of episodes displayed on podcasting apps and speed up the feed’s load time.\u003C\u002Fli>\n\u003Cli>Utilize one of several private podcasting \u003Ca href=\"https:\u002F\u002Fcastos.com\u002Fintegrations\" rel=\"nofollow ugc\">integrations\u003C\u002Fa> to enable private podcast functionality on your WordPress site.\u003C\u002Fli>\n\u003Cli>With Castos, use the \u003Ca href=\"https:\u002F\u002Fsupport.castos.com\u002Farticle\u002F191-submit-your-podcast-to-spotify\" rel=\"nofollow ugc\">one-click submission feature\u003C\u002Fa> to easily submit your podcast to Spotify, Apple Podcasts, Amazon Music, and more.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Cem>MANAGE MULTIPLE PODCASTS FROM THE SAME SITE\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fsupport.castos.com\u002Farticle\u002F282-working-with-multiple-podcasts\" rel=\"nofollow ugc\">Create unique RSS feeds for multiple podcasts\u003C\u002Fa> and feature them on the same website.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Save unique settings per podcast for easy management.\u003C\u002Fli>\n\u003Cli>Create custom subscribe buttons for each podcast you create\u003C\u002Fli>\n\u003Cli>Optional “catch-all” feed for podcast networks that want to aggregate all of their shows into a single feed.\u003C\u002Fli>\n\u003Cli>With Castos, pay one price to host multiple podcasts under one account. Each plan features unlimited uploads and bandwidth so you’ll never hit a limit when managing more than one show.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Cem>CUSTOMIZE THE EMBEDDED MEDIA PLAYERS WITH BLOCKS\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Choose between a standard compact player or feature-rich HTML5 media player that displays your cover art or episode-specific images. Change the settings to display your podcast exactly how you want it.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display customizable subscribe links to Apple Podcast, Spotify, Stitcher, Overcast, and Pocketcasts. Also include links to download the content or play it in a new window.\u003C\u002Fli>\n\u003Cli>Display episode meta data like episode durations and date published beneath the player.\u003C\u002Fli>\n\u003Cli>Customize the background and player progress bar colors to match your brand.\u003C\u002Fli>\n\u003Cli>Select the player’s position either above or below the post content.\u003C\u002Fli>\n\u003Cli>Media player is mobile-responsive so podcast posts look great across desktop browsers and mobile devices.\u003C\u002Fli>\n\u003Cli>Use the Castos Player block to feature the player anywhere on your website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Cem>USE CUSTOM WIDGETS AND BLOCKS TO CREATE PLAYLISTS & DISPLAY THEM ANYWHERE\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Curate custom playlists with embeddable widgets then display them anywhere on your website.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Feature single episodes anywhere on your website with the \u003Ca href=\"https:\u002F\u002Fsupport.castos.com\u002Farticle\u002F407-seriously-simple-podcasting-shortcodes#Podcast-episode-shortcode-fKqRV\" rel=\"nofollow ugc\">Podcast Episode shortcode\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Insert episode player anywhere with the Castos Player block.\u003C\u002Fli>\n\u003Cli>Create playlists featuring all episodes from specific podcast with the Episode List block.\u003C\u002Fli>\n\u003Cli>Curate custom playlists with specific episodes with the Playlist Player block.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Cem>PUBLISH PODCAST EPISODES ON ANY POST TYPE\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You have full control over how podcast episodes appear on your website by picking which post type to apply the plugin settings.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Choose which post type (from posts, the Podcast post type that SSP creates, or any other custom post type on your site) to enable podcast functions. This adds all podcast posts from the specific type to your feed.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Cem>SUPPORTS VIDEO PODCASTING\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Feature embedded video players within any podcast post.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Embed video players from Vimeo, VideoPress, or the common video block.\u003C\u002Fli>\n\u003Cli>Display the embedded video player anywhere within your podcast post.\u003C\u002Fli>\n\u003Cli>With Castos, host your audio and video podcast files with our \u003Ca href=\"https:\u002F\u002Fcastos.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Pro plan\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Cem>FREE ANALYTICS ADD-ONS & INTEGRATIONS\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Understand how your podcast is performing with our free Seriously Simple Stats add-on.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Install \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fseriously-simple-stats\u002F\" rel=\"ugc\">Seriously Simple Stats\u003C\u002Fa> to access listener statistics for free. Track total listens per episode, by date range, and by listening sources.\u003C\u002Fli>\n\u003Cli>Connect 3rd party analytics platforms like Podtrac.\u003C\u002Fli>\n\u003Cli>With Castos, view advanced analytics by geographic location, device, and listening platform plus total unique subscribers. Also access your Spotify-specific data from your dashboard for a holistic view of your podcast’s performance.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Cem>SIMPLIFIED IMPORTS, MIGRATIONS, AND REDIRECTS\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Seriously Simple Podcasting works with any podcast hosting provider. Easily import or migrate your podcast files to the plugin then start managing your show via WordPress.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsupport.castos.com\u002Farticle\u002F97-migrate-your-podcast-from-another-host-to-castos#Import-your-existing-podcast-into-WordPress-with-Seriously-Simple-Podc-grShq\" rel=\"nofollow ugc\">Easily import podcasts to Seriously Simple Podcasting\u003C\u002Fa> from LibSyn, Buzzsprout, Podbean, Soundcloud, or Simplecast.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsupport.castos.com\u002Farticle\u002F108-migrate-your-podcast-from-powerpress-and-blubrry-to-your-wordpress-website\" rel=\"nofollow ugc\">Migrate existing podcasts from other WordPress podcasting plugins\u003C\u002Fa> to Seriously Simple Podcasting.\u003C\u002Fli>\n\u003Cli>With Castos, connect Seriously Simple Podcasting to your Castos account in one click. Your podcast content will automatically sync with your Castos account as you make changes or upload new episodes from WordPress.\u003C\u002Fli>\n\u003Cli>Redirect RSS feedd to a new location by supplying the new feed’s URL.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>\u003Cem>FULLY INTEGRATED WITH CASTOS PODCAST HOSTING\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can host your podcast with any podcast hosting provider. If you choose to host your podcast with Castos, you’ll access these unique features from your Castos dashboard.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatic syncing: Seriously Simple Podcasting automatically syncs with any Castos plan. Fully manage your podcast from WordPress while hosting your podcast files on our dedicated servers.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcastos.com\u002Fprivate-podcasting-solutions\u002F\" rel=\"nofollow ugc\">Private Podcasting\u003C\u002Fa>: Castos has several integrations with third-party membership site tools like Paid Memberships Pro, LMS providers like LifterLMS, and payment processors such as Stripe to empower you to offer paid podcasting to your audience.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcastos.com\u002Ftranscription\u002F\" rel=\"nofollow ugc\">Free episode transcriptions\u003C\u002Fa>: Pay nothing for on-demand episode transcriptions. Use these transcriptions on your website to make your podcast more accessible.\u003C\u002Fli>\n\u003Cli>Monetize Your Podcast: You can make money from your podcast either through \u003Ca href=\"https:\u002F\u002Fcastos.com\u002Fcommerce\u002F\" rel=\"nofollow ugc\">Castos Commerce\u003C\u002Fa> by receiving listener donations, or by using \u003Ca href=\"https:\u002F\u002Fcastos.com\u002Fadvertising\u002F\" rel=\"nofollow ugc\">Castos Ads\u003C\u002Fa> to enable programmatic ad insertion on your podcast to get paid from your podcast.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcastos.com\u002Fupload-a-podcast-to-youtube\u002F#Castos-YouTube-Republishing\" rel=\"nofollow ugc\">Automatic YouTube republishing\u003C\u002Fa>: Castos supports video file hosting and can automatically publish your podcast to YouTube.\u003C\u002Fli>\n\u003Cli>Unlimited storage and bandwidth: Every \u003Ca href=\"https:\u002F\u002Fcastos.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Castos plan\u003C\u002Fa> includes unlimited uploads and bandwidth. You can also host multiple podcasts under one account for one price.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Where to find help\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Seriously Simple Podcasting comes with complete  \u003Ca href=\"https:\u002F\u002Fsupport.castos.com\u002Fcategory\u002F406-seriously-simple-podcasting\" rel=\"nofollow ugc\">documentation\u003C\u002Fa>. Please read this documentation thoroughly before posting on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fseriously-simple-podcasting\" rel=\"ugc\">the support forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How to contribute\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you want to contribute to Seriously Simple Podcasting, you can \u003Ca href=\"https:\u002F\u002Fgitlab.com\u002Fcastos\u002FSeriously-Simple-Podcasting\" rel=\"nofollow ugc\">fork the GitLab repository\u003C\u002Fa> – please read the \u003Ca href=\"https:\u002F\u002Fgitlab.com\u002Fcastos\u002FSeriously-Simple-Podcasting\u002F-\u002Fblob\u002Fmaster\u002FCONTRIBUTING.md\" rel=\"nofollow ugc\">contributor guidelines\u003C\u002Fa> for more information on how you can do this.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Help translate this plugin\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you would like to contribute translations to this plugin you can do so through \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fseriously-simple-podcasting\" rel=\"nofollow ugc\">a simple web interface\u003C\u002Fa>. Any and all translations (new languages or updates to existing ones) are always welcome.\u003C\u002Fp>\n","Podcasting the way it's meant to be. No mess, no fuss - just you and your content taking over the world.",30000,2317630,94,326,"2026-03-18T14:50:00.000Z","5.3","7.4",[114,21,115,116,117],"audio","playlist","podcast","podcasting","https:\u002F\u002Fcastos.com\u002Fseriously-simple-podcasting\u002F?utm_medium=sspodcasting&utm_source=wordpress&utm_campaign=wpplugin_08_2019","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fseriously-simple-podcasting.3.14.4.zip",92,15,"2026-03-26 00:00:00",{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":108,"num_ratings":133,"last_updated":134,"tested_up_to":135,"requires_at_least":136,"requires_php":137,"tags":138,"homepage":141,"download_link":142,"security_score":77,"vuln_count":14,"unpatched_count":29,"last_vuln_date":143,"fetched_at":97},"cue","Cue by AudioTheme.com","2.4.5","AudioTheme","https:\u002F\u002Fprofiles.wordpress.org\u002Faudiotheme\u002F","\u003Cp>\u003Cem>Cue\u003C\u002Fem> makes it easy to create and manage beautiful, fully responsive audio playlists. Primarily built with music in mind, \u003Cem>Cue\u003C\u002Fem> can also be used for podcasts, sermons or to showcase voice over samples.\u003C\u002Fp>\n\u003Cp>There’s no need to fiddle with XML, JSON, or FTP. Just upload audio files with the familiar WordPress Media Manager, then insert them into a playlist with the click of a button. \u003Cem>Cue\u003C\u002Fem> fetches metadata from uploaded files to automatically complete the title, artist, and length for each track.\u003C\u002Fp>\n\u003Cp>It works on desktop, tablets, and other mobile devices.\u003C\u002Fp>\n\u003Cp>View a working demo at \u003Ca href=\"https:\u002F\u002Faudiotheme.com\u002Fview\u002Fcue\u002F?utm_source=wordpress.org&utm_medium=link&utm_content=cue-readme-demo&utm_campaign=plugins\" rel=\"nofollow ugc\">https:\u002F\u002Faudiotheme.com\u002Fview\u002Fcue\u002F\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Create unlimited playlists.\u003C\u002Fli>\n\u003Cli>Embed a player in any post, page, or sidebar using a shortcode or widget.\u003C\u002Fli>\n\u003Cli>Reorder tracks with a simple drag and drop interface.\u003C\u002Fli>\n\u003Cli>Seamlessly integrates with WordPress’ media manager to select audio and images.\u003C\u002Fli>\n\u003Cli>Automatically fetches title, artist, and length from the metadata if it’s available.\u003C\u002Fli>\n\u003Cli>Completely responsive to work on any device that supports your audio format.\u003C\u002Fli>\n\u003Cli>Link to external sources like Amazon S3 or other CDNs.\u003C\u002Fli>\n\u003Cli>Customize the player background image.\u003C\u002Fli>\n\u003Cli>Use custom artwork for each track.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Level up with Cue Pro\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Faudiotheme.com\u002Fview\u002Fcuepro\u002F?utm_source=wordpress.org&utm_medium=link&utm_content=cue-readme&utm_campaign=plugins\" rel=\"nofollow ugc\">\u003Cem>Cue Pro\u003C\u002Fem>\u003C\u002Fa> is a premium add-on with a number of useful features. It includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Insights into how visitors interact with your audio.\u003C\u002Fli>\n\u003Cli>Purchase and download links for each track.\u003C\u002Fli>\n\u003Cli>New themes to change the appearance of the player.\u003C\u002Fli>\n\u003Cli>Playlist sharing to allow fans to embed your players on their own sites.\u003C\u002Fli>\n\u003Cli>Popup functionality so visitors can continue listening while browsing your site.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Cue Pro\u003C\u002Fem> purchases include email-based priority support and help support development of the free version of \u003Cem>Cue\u003C\u002Fem>.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>About AudioTheme\u003C\u002Fh3>\n\u003Cp>\u003Cem>Cue\u003C\u002Fem> is built by the team at \u003Ca href=\"https:\u002F\u002Faudiotheme.com\u002F?utm_source=wordpress.org&utm_medium=link&utm_content=cue-readme&utm_campaign=plugins\" rel=\"nofollow ugc\">AudioTheme\u003C\u002Fa>. We’re a small, independent team of designers, developers and musicians focused on creating and supporting professional, world-class WordPress themes and plugins for bands and musicians.\u003C\u002Fp>\n\u003Cp>\u003Cem>Cue\u003C\u002Fem> was originally integrated in our commercial platform, but we wanted everyone to have the ability to easily create beautiful playlists, so we released it free for general use. It powers the unique players in all of our premium music themes, as well as \u003Ca href=\"https:\u002F\u002Faudiotheme.com\u002Fview\u002Fcuebar\u002F?utm_source=wordpress.org&utm_medium=link&utm_content=cue-readme&utm_campaign=plugins\" rel=\"nofollow ugc\">\u003Cem>CueBar\u003C\u002Fem>\u003C\u002Fa>, a site-wide, continuous audio player made for WordPress.\u003C\u002Fp>\n\u003Cp>We care about our work and stand by it. We’d love to have your support and the opportunity to earn your loyalty.\u003C\u002Fp>\n\u003Ch3>Support Policy\u003C\u002Fh3>\n\u003Cp>We’ll do our best to keep this plugin up to date, fix bugs and implement features when possible, but technical support can only be provided for active AudioTheme customers. If you enjoy this plugin and would like to support its development, you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Faudiotheme.com\u002F?utm_source=wordpress.org&utm_medium=link&utm_content=cue-readme&utm_campaign=plugins\" rel=\"nofollow ugc\">Visit AudioTheme\u003C\u002Fa> and tell your friends!\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fcue#postform\" rel=\"ugc\">Leave a review\u003C\u002Fa> and let everyone know how much you love it.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FAudioTheme\" rel=\"nofollow ugc\">Follow @AudioTheme\u003C\u002Fa> on Twitter.\u003C\u002Fli>\n\u003Cli>Help out on the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcue\" rel=\"ugc\">support forums\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Faudiotheme\u002Fcue\" rel=\"nofollow ugc\">Contribute on GitHub\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","Delightful and reliable audio playlists.",6000,163200,36,"2025-04-02T12:20:00.000Z","6.7.5","5.6","7.1",[114,139,23,115,140],"mp3","tracks","https:\u002F\u002Faudiotheme.com\u002Fview\u002Fcue\u002F?utm_source=wordpress-plugin&utm_medium=link&utm_content=cue-plugin-uri&utm_campaign=plugins","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcue.2.4.5.zip","2025-04-01 00:00:00",{"slug":145,"name":146,"version":147,"author":148,"author_profile":149,"description":150,"short_description":151,"active_installs":152,"downloaded":153,"rating":154,"num_ratings":155,"last_updated":156,"tested_up_to":157,"requires_at_least":158,"requires_php":18,"tags":159,"homepage":161,"download_link":162,"security_score":77,"vuln_count":14,"unpatched_count":29,"last_vuln_date":163,"fetched_at":97},"audio-album","Audio Album","1.5.1","cubecolour","https:\u002F\u002Fprofiles.wordpress.org\u002Fnumeeja\u002F","\u003Cp>The plugin was originally created for \u003Ca href=\"https:\u002F\u002Fdavedrapercreations.co.uk\u002F\" title=\"Dave Draper\" rel=\"nofollow ugc\">Dave Draper’s\u003C\u002Fa> website where it is used on the music pages. For an example, please see the page for the \u003Ca href=\"http:\u002F\u002Fdavedrapercreations.co.uk\u002Fmusic\u002Fthe-wild-bunch\u002F\" title=\"The Wild Bunch\" rel=\"nofollow ugc\">Wild Bunch album\u003C\u002Fa> featuring Dave on vocals and bass.\u003C\u002Fp>\n\u003Cp>Audio Album uses the default audio capabilities of mediaelement.js included with core WordPress files and enables you to style a group of audio files (MP3 etc) as single block formatted as an album. The colours can be customized in the Audio Album section of the WordPress customizer.\u003C\u002Fp>\n\u003Cp>You can display as many Audio Albums as you need on your site, with multiple albums on each page.\u003C\u002Fp>\n\u003Ch4>Usage:\u003C\u002Fh4>\n\u003Cp>There are two shortcodes that can be used \u003Ccode>[audioalbum]\u003C\u002Fcode> and \u003Ccode>[audiotrack]\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[audioalbum]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This shortcode is required and can be used as a header before the \u003Ccode>[audiotrack]\u003C\u002Fcode> shortcodes.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>title\u003C\u002Fli>\n\u003Cli>detail\u003C\u002Fli>\n\u003Cli>\n\u003Cp>date\u003C\u002Fp>\n\u003Cp>[audiotrack]\u003Cbr \u002F>\nThis acts as a wrapper to the WordPress [audio] shortcode so uses the same parameters as the [audio] shortcode, plus the following which are specific to this plugin:\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>title\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>width\u003C\u002Fli>\n\u003Cli>height\u003C\u002Fli>\n\u003Cli>songwriter\u003C\u002Fli>\n\u003Cli>buttontext\u003C\u002Fli>\n\u003Cli>buttonlink\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The following attributes can also be used in the \u003Ccode>[audiotrack]\u003C\u002Fcode> shortcode in the same way in which they are used in the default WordPress [audio] shortcode:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>src\u003C\u002Fli>\n\u003Cli>mp3\u003C\u002Fli>\n\u003Cli>ogg\u003C\u002Fli>\n\u003Cli>wma\u003C\u002Fli>\n\u003Cli>m4a\u003C\u002Fli>\n\u003Cli>wav\u003C\u002Fli>\n\u003Cli>loop\u003C\u002Fli>\n\u003Cli>autoplay\u003C\u002Fli>\n\u003Cli>preload\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Example\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[audioalbum title=\"The Album Title\" detail=\"Some other Details\" date=\"2022\"]\n\n[audiotrack title=\"Song One\" songwriter=\"credit\" mp3=\"http:\u002F\u002Fdomain.com\u002Fwp-content\u002Fuploads\u002Faudiofile1.mp3\"]\n\n[audiotrack title=\"Song Two\" songwriter=\"credit\" mp3=\"http:\u002F\u002Fdomain.com\u002Fwp-content\u002Fuploads\u002Faudiofile2.mp3\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Lyrics \u002F other info in a popup window\u003C\u002Fh4>\n\u003Cp>There are some additional parameters which can be added to the [audioalbum] shortcode to optionally add a button to allow a visitor to open a link on each audio track to open a page in your site within a popup window.\u003C\u002Fp>\n\u003Cp>You need to first create the page, post, or custom post type post and make a note of the post\u002Fpage id.\u003C\u002Fp>\n\u003Cp>There are four parameter\u002Fvalue pairs which can be added to the [audiotrack] shortcode to make a popup link\u003C\u002Fp>\n\u003Cul>\n\u003Cli>buttonlink\u003C\u002Fli>\n\u003Cli>buttontext\u003C\u002Fli>\n\u003Cli>width\u003C\u002Fli>\n\u003Cli>height\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Enter the page\u002Fpost id of the target page as the value for the buttonlink parameter. A button will only be shown when a value is set for the buttonlink parameter.\u003C\u002Fp>\n\u003Cp>The buttontext attribute is optional, if no value is specified, the default label of ‘lyrics’ will be shown on the button.\u003C\u002Fp>\n\u003Cp>The dimensions of the popup window can also be specified using optional width and height attributes. If no values are given, default values of 520px (width) and 400px (height) will be used.\u003C\u002Fp>\n\u003Cp>If your site is using a Genesis child theme, as a little bonus, a landing-page template without a masthead, menus, sidebars or other distractions will be applied to the popup page.\u003C\u002Fp>\n\u003Ch4>Example with default ‘lyrics’ button\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[audiotrack title=\"Song One\" songwriter=\"credit\" mp3=\"http:\u002F\u002Fdomain.com\u002Fwp-content\u002Fuploads\u002Faudiofile1.mp3\" buttonlink=\"808\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Example with custom button and custom popup window dimensions\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[audiotrack title=\"Song Two\" songwriter=\"credit\" mp3=\"http:\u002F\u002Fdomain.com\u002Fwp-content\u002Fuploads\u002Faudiofile2.mp3\" buttonlink=\"909\" buttontext=\"linklabel\" width=\"300\" height=\"500\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The parameters used with the standard native WordPress audio shortcode outlined in the codex: \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FAudio_Shortcode\" title=\"Audio Shortcode\" rel=\"nofollow ugc\">Audio Shortcode\u003C\u002Fa> page can also be used in the \u003Ccode>[audiotrack]\u003C\u002Fcode> shortcode.\u003C\u002Fp>\n","Displays a collection of audio tracks as an audio album using the native WordPress audio features. Includes a customizer section.",4000,108338,100,12,"2025-06-23T09:52:00.000Z","6.8.5","4.9",[160,114,139,23,115],"album","https:\u002F\u002Fcubecolour.co.uk\u002Faudio-album","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faudio-album.1.5.1.zip","2025-03-27 00:00:00",{"slug":165,"name":166,"version":167,"author":168,"author_profile":169,"description":170,"short_description":171,"active_installs":172,"downloaded":173,"rating":174,"num_ratings":155,"last_updated":175,"tested_up_to":16,"requires_at_least":176,"requires_php":18,"tags":177,"homepage":183,"download_link":184,"security_score":154,"vuln_count":14,"unpatched_count":29,"last_vuln_date":185,"fetched_at":31},"audio-player-with-playlist-ultimate","Audio Player with Playlist Ultimate","1.3.3","Essential Plugin","https:\u002F\u002Fprofiles.wordpress.org\u002Fessentialplugin\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.essentialplugin.com\u002Fwordpress-plugin\u002Faudio-player-playlist\u002F?utm_source=WP&utm_medium=Audio-Player&utm_campaign=Read-Me\" rel=\"nofollow ugc\">Explore Audio Player with Playlist Pro Features\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.essentialplugin.com\u002Fwordpress-plugin\u002Faudio-player-playlist\u002F?utm_source=WP&utm_medium=Audio-Player&utm_campaign=Read-Me#wpos-epb\" rel=\"nofollow ugc\">Bundle Deal\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Audio Player with Playlist Ultimate plugin is a jQuery HTML5 Music\u002FAudio Player with Playlist comes with huge possibilities and options.\u003C\u002Fp>\n\u003Cp>Its comes with 1 styles for grid and 1 for playlist with Single player & Multiple player orientations. It supports shuffle, repeat, volume control, time line progress-bar, Song Title and Artist.\u003C\u002Fp>\n\u003Cp>This plugin is built by open source jPlayer jQuery Plugin,  HTM5 & CSS3. You can customize or re-style the player easily with CSS. It will take few minutes to integrate.\u003C\u002Fp>\n\u003Cp>Also work with Gutenberg shortcode block.\u003C\u002Fp>\n\u003Ch4>How to use\u003C\u002Fh4>\n\u003Cp>Once you added all the data under audio player section, please use the below shortcode to display.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[apwp_player_grid]\n[apwp_player]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Shortcode parameters are for both shortcodes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>grid\u003C\u002Fstrong> : grid=”3″ (Display players in grid)\u003Cbr \u002F>\nNote : This parameter will not work with shortcode [apwp_player]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>limit\u003C\u002Fstrong> : limit=”10″ (Display 10 items)\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>playlist_id\u003C\u002Fstrong> : playlist_id=”XX” (Display by playlist )\u003C\u002Fli>\n\u003Cli>\u003Cstrong>audio_id\u003C\u002Fstrong> : audio_id=”XX” (Display only one player with audio id )\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>playlist_hide\u003C\u002Fstrong> :  playlist_hide=”true” (To hide the playlist. values are “true” OR “false”)\u003Cbr \u002F>\nNote : This parameter will not work with shortcode [apwp_player_grid])\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>order\u003C\u002Fstrong> : order=”DESC” (Order your audio player by “ASC” OR “DESC” )\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>orderby\u003C\u002Fstrong> : orderby=”date” (Display Audio player list in your order. Values are “ID”, “title”, “name”, and “date” )\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Audio Player with Playlist Pro Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Elegant, Clean, Modern & Fully Responsive Design\u003C\u002Fli>\n\u003Cli>Change player theme color from setting page.\u003C\u002Fli>\n\u003Cli>Single player and Multiple player\u003C\u002Fli>\n\u003Cli>Multiple Player supports in same page\u003C\u002Fli>\n\u003Cli>1 Player Styles\u003C\u002Fli>\n\u003Cli>Song Title and Artist name supported\u003C\u002Fli>\n\u003Cli>Album Art supported\u003C\u002Fli>\n\u003Cli>Shuffle, Repeat, volume control\u003C\u002Fli>\n\u003Cli>Easy integration\u003C\u002Fli>\n\u003Cli>Font Awesome Icon\u003C\u002Fli>\n\u003Cli>Work on desktop, tablet and phone\u003C\u002Fli>\n\u003Cli>Responsive and retina ready\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>PRO Features :\u003C\u002Fh4>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Premium Version\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>3 Shortcode- Grid, Slider, Playlist\u003C\u002Fli>\n\u003Cli>6 Audio Player with playlist, 4  Audio Player in grid and slider styles\u003C\u002Fli>\n\u003Cli>Shuffle, Repeat, volume control\u003C\u002Fli>\n\u003Cli>Multiple Player supports in same page\u003C\u002Fli>\n\u003Cli>Elegant, Clean, Modern & Fully Responsive Design\u003C\u002Fli>\n\u003Cli>Single player and Multiple player\u003C\u002Fli>\n\u003Cli>Multiple Player supports in same page\u003C\u002Fli>\n\u003Cli>12 Different Player Styles\u003C\u002Fli>\n\u003Cli>Horizontal and vertical playlist with multiple layout\u003C\u002Fli>\n\u003Cli>Song Title and Artist name supported\u003C\u002Fli>\n\u003Cli>Album Art supported\u003C\u002Fli>\n\u003Cli>Shuffle, repeat, volume control\u003C\u002Fli>\n\u003Cli>Easy integration\u003C\u002Fli>\n\u003Cli>Playlist toggle\u003C\u002Fli>\n\u003Cli>Font Awesome Icon\u003C\u002Fli>\n\u003Cli>Work on desktop, tablet and phone\u003C\u002Fli>\n\u003Cli>Responsive and retina ready\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.essentialplugin.com\u002Fwordpress-plugin\u002Faudio-player-playlist\u002F?utm_source=WP&utm_medium=Audio-Player&utm_campaign=Read-Me\" rel=\"nofollow ugc\">Explore Audio Player with Playlist Ultimate Pro Features\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","Audio Player with Playlist Ultimate is a Music\u002FAudio Player with Playlist and options like shuffle, repeat, volume control, progress-bar, song info.",600,34045,64,"2026-02-19T18:05:00.000Z","4.0",[178,179,180,181,182],"album-art","audio-player-with-playlist","multiple-player","music-player","repeat-single-player","https:\u002F\u002Fwww.essentialplugin.com\u002Fwordpress-plugin\u002Faudio-player-playlist\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faudio-player-with-playlist-ultimate.1.3.3.zip","2023-07-20 00:00:00",{"attackSurface":187,"codeSignals":244,"taintFlows":275,"riskAssessment":303,"analyzedAt":317},{"hooks":188,"ajaxHandlers":231,"restRoutes":238,"shortcodes":239,"cronEvents":243,"entryPointCount":51,"unprotectedCount":28},[189,195,198,203,207,211,215,219,223,227],{"type":190,"name":191,"callback":192,"file":193,"line":194},"action","admin_menu","add_config_page","tune-library.php",135,{"type":190,"name":196,"callback":196,"file":193,"line":197},"admin_init",136,{"type":199,"name":200,"callback":201,"priority":11,"file":193,"line":202},"filter","plugin_action_links","filter_plugin_actions",143,{"type":199,"name":204,"callback":205,"file":193,"line":206},"ozh_adminmenu_icon","add_ozh_adminmenu_icon",144,{"type":190,"name":208,"callback":209,"file":193,"line":210},"admin_post_tune_lib_admin","process_tune_library_options",170,{"type":190,"name":212,"callback":213,"file":193,"line":214},"wp_enqueue_scripts","tune_library_enqueue_scripts",1053,{"type":190,"name":216,"callback":217,"file":193,"line":218},"admin_enqueue_scripts","tune_library_admin_scripts",1054,{"type":199,"name":220,"callback":221,"file":193,"line":222},"query_vars","tune_library_queryvars",1166,{"type":190,"name":224,"callback":225,"file":193,"line":226},"wp_head","tune_library_header",1168,{"type":190,"name":228,"callback":229,"file":193,"line":230},"init","tune_library_init",1172,[232,235],{"action":233,"nopriv":50,"callback":233,"hasNonce":50,"hasCapCheck":50,"file":193,"line":234},"tune_library_ajax",1056,{"action":233,"nopriv":236,"callback":233,"hasNonce":50,"hasCapCheck":50,"file":193,"line":237},true,1057,[],[240],{"tag":4,"callback":241,"file":193,"line":242},"tune_library_func",1170,[],{"dangerousFunctions":245,"sqlUsage":246,"outputEscaping":249,"fileOperations":28,"externalRequests":29,"nonceChecks":51,"capabilityChecks":51,"bundledLibraries":274},[],{"prepared":247,"raw":29,"locations":248},35,[],{"escaped":250,"rawEcho":11,"locations":251},22,[252,255,257,259,261,263,265,267,269,272],{"file":193,"line":253,"context":254},220,"raw output",{"file":193,"line":256,"context":254},343,{"file":193,"line":258,"context":254},379,{"file":193,"line":260,"context":254},396,{"file":193,"line":262,"context":254},1123,{"file":193,"line":264,"context":254},1125,{"file":193,"line":266,"context":254},1127,{"file":193,"line":268,"context":254},1129,{"file":270,"line":271,"context":254},"writeNodes.php",17,{"file":270,"line":273,"context":254},31,[],[276,294],{"entryPoint":277,"graph":278,"unsanitizedCount":29,"severity":293},"\u003Ctune-library> (tune-library.php:0)",{"nodes":279,"edges":291},[280,285],{"id":281,"type":282,"label":283,"file":193,"line":284},"n0","source","$_GET (x2)",1075,{"id":286,"type":287,"label":288,"file":193,"line":289,"wp_function":290},"n1","sink","get_results() [SQLi]",1092,"get_results",[292],{"from":281,"to":286,"sanitized":236},"low",{"entryPoint":295,"graph":296,"unsanitizedCount":28,"severity":302},"tune_library_ajax (tune-library.php:1070)",{"nodes":297,"edges":300},[298,299],{"id":281,"type":282,"label":283,"file":193,"line":284},{"id":286,"type":287,"label":288,"file":193,"line":289,"wp_function":290},[301],{"from":281,"to":286,"sanitized":50},"high",{"summary":304,"deductions":305},"The \"tune-library\" v1.6.4 plugin exhibits a mixed security posture. While it demonstrates good practices such as 100% prepared statement usage for SQL queries and a moderate number of nonce and capability checks, significant concerns arise from its attack surface and taint analysis.  The presence of two AJAX handlers without authentication checks represents a direct entry point for potential unauthenticated attacks.  Furthermore, the taint analysis revealed one flow with unsanitized paths, classified as high severity, which could lead to various vulnerabilities if not properly handled.  The plugin's vulnerability history, including a past critical CVE and a medium CVE, with the last one being in 2026, suggests a recurring tendency towards critical and injection-based vulnerabilities. This historical pattern, combined with the current high-severity taint flow and unprotected entry points, indicates a need for heightened vigilance and thorough review.",[306,308,310,312,315],{"reason":307,"points":11},"Unprotected AJAX handlers",{"reason":309,"points":155},"High severity unsanitized taint flow",{"reason":311,"points":121},"Past critical CVE",{"reason":313,"points":314},"Past medium CVE",5,{"reason":316,"points":314},"Insufficient output escaping","2026-03-17T00:02:45.880Z",{"wat":319,"direct":325},{"assetPaths":320,"generatorPatterns":322,"scriptPaths":323,"versionParams":324},[321],"\u002Fwp-content\u002Fplugins\u002Ftune-library\u002Fchart_curve.png",[],[],[],{"cssClasses":326,"htmlComments":327,"htmlAttributes":330,"restEndpoints":336,"jsGlobals":337,"shortcodeOutput":338},[],[328,329],"Copyright 2020  Yannick Lefebvre  (email : ylefebvre@gmail.com)\n\tPart of XML Loading Code based on Musiker (http:\u002F\u002Fcode.google.com\u002Fp\u002Fmusiker\u002F) by Jarvis Badgley, re-used with permission\n\tThanks to Gary Traffanstedt for his help on testing, his great suggestions and with AJAX\n\n    This program is free software; you can redistribute it and\u002For modify\n    it under the terms of the GNU General Public License as published by\n    the Free Software Foundation; either version 2 of the License, or\n    (at your option) any later version.\n\n    This program is distributed in the hope that it will be useful,\n    but WITHOUT ANY WARRANTY; without even the implied warranty of\n    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\n    GNU General Public License for more details.\n\n    You should have received a copy of the GNU General Public License\n    along with this program; if not, write to the Free Software\n    Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA","\u003C!-- IMPORTANT: If you are an author of this plugin, you must change the default plugin settings below. -->",[331,332,333,334,335],"name=\"tune-library-options\"","method=\"post\"","enctype=\"multipart\u002Fform-data\"","id=\"tunelibrarypp-config\"","name=\"tunelibrarypp-config\"",[],[],[],{"error":236,"url":340,"statusCode":341,"statusMessage":342,"message":342},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Ftune-library\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":344,"versions":345},4,[346,351,359,368],{"version":6,"download_url":26,"svn_tag_url":347,"released_at":39,"has_diff":50,"diff_files_changed":348,"diff_lines":39,"trac_diff_url":349,"vulnerabilities":350,"is_current":236},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftune-library\u002Ftags\u002F1.6.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftune-library%2Ftags%2F1.6.3&new_path=%2Ftune-library%2Ftags%2F1.6.4",[],{"version":352,"download_url":353,"svn_tag_url":354,"released_at":39,"has_diff":50,"diff_files_changed":355,"diff_lines":39,"trac_diff_url":356,"vulnerabilities":357,"is_current":50},"1.6.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftune-library.1.6.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftune-library\u002Ftags\u002F1.6.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftune-library%2Ftags%2F1.5.2&new_path=%2Ftune-library%2Ftags%2F1.6.3",[358],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":360,"download_url":361,"svn_tag_url":362,"released_at":39,"has_diff":50,"diff_files_changed":363,"diff_lines":39,"trac_diff_url":364,"vulnerabilities":365,"is_current":50},"1.5.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftune-library.1.5.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftune-library\u002Ftags\u002F1.5.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftune-library%2Ftags%2F1.2&new_path=%2Ftune-library%2Ftags%2F1.5.2",[366,367],{"id":57,"url_slug":58,"title":59,"severity":63,"cvss_score":64,"vuln_type":66,"patched_in_version":62},{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":369,"download_url":370,"svn_tag_url":371,"released_at":39,"has_diff":50,"diff_files_changed":372,"diff_lines":39,"trac_diff_url":39,"vulnerabilities":373,"is_current":50},"1.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftune-library.1.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftune-library\u002Ftags\u002F1.2\u002F",[],[374,375],{"id":57,"url_slug":58,"title":59,"severity":63,"cvss_score":64,"vuln_type":66,"patched_in_version":62},{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6}]