CVE-2023-4025

CVE-2023-4025 affects the Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress. The root cause is a missing capability check in the update_player function, allowing unauthenticated users to modify data in versions up to 2.0.73. Connected Red Hat and Wordfence sources c...

CVE-2024-34753

CVE-2024-34753 corresponds to a Missing Authorization (Broken Access Control) vulnerability affecting WordPress Radio Player (SoftLab Radio Player). Connected sources identify the affected package as Radio Player for WordPress, with versions listed as n/a through 2.0.73. The root cause is an auth...

CVE-2024-8267

CVE-2024-8267 affects the Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin. It is a Stored Cross-Site Scripting (XSS) via the align attribute in the wp:radio-player Gutenberg block, impacting all versions up to and including 2.0.78. Root cause: insufficient ...

CVE-2023-4024

CVE-2023-4024 affects the Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress. A missing capability check in delete_player in versions up to 2.0.73 allows unauthenticated attackers to delete player instances. The Red Hat and Wordfence entries confirm the issue and ind...