Lucene search
HistoryAug 17, 2024 - 8:15 a.m.
CVE-2023-4024
wordpress
radio player
unauthorized modification
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
21.1%
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to delete player instances.
Affected configurations
Node
softlabbdradio_playerRange<2.0.74wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| softlabbd | radio_player | * | cpe:2.3:a:softlabbd:radio_player:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2023-4024
2024-08-17 08:15:05
CVE-2023-4026
2023-07-31 17:15:10
cvelist
cvelist
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-4026
2023-07-31 17:15:10
wordfence
wordfence
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
21.1%
Related for NVD:CVE-2023-4024