Lucene search
HistoryAug 17, 2024 - 8:15 a.m.
CVE-2023-4025
wordpress
radio player
vulnerability
unauthorized modification
data
capability check
unauthenticated attackers
update player instances
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
21.0%
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update player instances.
Affected configurations
Node
softlabbdradio_playerRange<2.0.74wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| softlabbd | radio_player | * | cpe:2.3:a:softlabbd:radio_player:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2023-4025
2024-08-17 08:15:05
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
21.0%
Related for NVD:CVE-2023-4025