Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2024-33592

WordPress Radio Player plugin <= 2.0.73 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Softlab Wordpress
Products
Radio Player Wordpress
CVE-2024-32506

WordPress Radio Player plugin <= 2.0.73 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Softlab Wordpress
Products
Radio Player Wordpress
CVE-2024-2906

WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Softlab Wordpress
Products
Radio Player Wordpress
CVE-2024-54385

WordPress Radio Player plugin <= 2.0.83 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery (SSRF) vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through <= 2.0.83.

CVSS 3.1 · 7.2 High EPSS 5.5% KEV · Not listed
Vendors
Softlab
Products
Radio Player
CVE-2023-4025

Radio Player <= 2.0.73 - Missing Authorization to Player Update

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update player instances.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Softlab Softlabbd
Products
Radio Player Radio Player
CVE-2023-4024

Radio Player <= 2.0.73 - Missing Authorization to Player Deletion

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to delete player instances.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Softlab Softlabbd
Products
Radio Player Radio Player
CVE-2023-4027

Radio Player <= 2.0.73 - Missing Authorization to Settings Update

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_settings function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update plugin settings.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Softlab Softlabbd
Products
Radio Player Radio Player