CVE-2024-8267: Improper Neutralization of Input During Web Page Generation

The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute within the 'wp:radio-player' Gutenberg block in all versions up to, and including, 2.0.78 due to insufficient input...

WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin < 1.0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin versions 1.0.8. Solution Update the WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for...

WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin < 1.0.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin versions 1.0.8. Solution Update the WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin to the...