Lucene search
WordfenceCVELIST:CVE-2023-4024HistoryAug 17, 2024 - 7:34 a.m.
CVE-2023-4024 Radio Player <= 2.0.73 - Missing Authorization to Player Deletion
2024-08-1707:34:21
CWE-862
Wordfence
www.cve.org
4
wordpress
radio player
cve-2023-4024
unauthorized deletion
missing authorization
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
21.1%
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to delete player instances.
CNA Affected
[
{
"vendor": "princeahmed",
"product": "Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress",
"versions": [
{
"version": "*",
"status": "affected",
"lessThanOrEqual": "2.0.73",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2023-4024
2024-08-17 08:15:05
CVE-2023-4026
2023-07-31 17:15:10
cve
cve
CVE-2023-4024
2024-08-17 08:15:05
CVE-2023-4026
2023-07-31 17:15:10
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
21.1%
Related for CVELIST:CVE-2023-4024