SoftLab

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

SoftLab records in CISA KEV

No SoftLab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Radio Player 6 records LOW Integrate Google Drive 4 records MEDIUM Upload Fields For Wpforms 1 record MEDIUM

Records

17 records

TI-2023-15420 CVE-2023-32117 · GHSA-fc7x-ffxp-c9q2

WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability

MEDIUM 59

Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through 1.1.99.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07335 Published 2024-12-09 No fix listed CWE-862

TI-2024-23539 CVE-2024-35670 · GHSA-j8c5-63vq-fhwp

WordPress Integrate Google Drive plugin <= 1.3.93 - Broken Access Control vulnerability

MEDIUM 48

Broken Authentication vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.93.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0041 Published 2024-06-04 No fix listed CWE-287

TI-2024-23530 CVE-2024-35661 · GHSA-976j-29v7-qjc5

WordPress Upload Fields for WPForms plugin <= 1.0.2 - Broken Access Control vulnerability

MEDIUM 42

Missing Authorization vulnerability in SoftLab Upload Fields for WPForms.This issue affects Upload Fields for WPForms: from n/a through 1.0.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00365 Published 2024-06-09 No fix listed CWE-862

TI-2023-27179 CVE-2023-49769 · GHSA-f8gq-c723-xwpv

WordPress Integrate Google Drive Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-12-17 No fix listed CWE-352

TI-2024-02714 CVE-2024-2906 · GHSA-7mhp-79q4-v3j9

WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00482 Published 2024-03-26 No fix listed CWE-862

TI-2024-07663 CVE-2024-8267 · GHSA-wv6w-qmjm-mqmv

Cross-site scripting in princeahmed Radio Player – Live Shoutcast, Icecast and Any Audio…

LOW 34

The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute within the 'wp:radio-player' Gutenberg bloc…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-09-24 No fix listed CWE-79

TI-2023-03736 CVE-2023-4024 · GHSA-chr5-xqvr-7wp2

Radio Player <= 2.0.73 - Missing Authorization to Player Deletion

LOW 31

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_player function in versions up to, and including, 2.0.73.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00504 Published 2024-08-17 No fix listed CWE-862

TI-2024-23044 CVE-2024-34753 · GHSA-hpcw-9w82-7fr9

WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00339 Published 2024-06-11 No fix listed CWE-862

TI-2024-21687 CVE-2024-32813 · GHSA-p6p3-9g2f-h4hh

WordPress Integrate Google Drive plugin <= 1.3.9 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00326 Published 2024-06-09 No fix listed CWE-862

TI-2023-03738 CVE-2023-4027 · GHSA-gpq7-v9v5-ggrx

Radio Player <= 2.0.73 - Missing Authorization to Settings Update

LOW 30

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_settings function in versions up to, and including, 2.0.73.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0041 Published 2024-08-17 No fix listed CWE-862

TI-2023-03737 CVE-2023-4025 · GHSA-gp4m-387m-p46x

Radio Player <= 2.0.73 - Missing Authorization to Player Update

LOW 30

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_player function in versions up to, and including, 2.0.73.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0041 Published 2024-08-17 No fix listed CWE-862

TI-2024-19587 CVE-2024-29811 · GHSA-v8pj-77q3-8742

WordPress Radio Player plugin <= 2.0.73 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftLab Radio Player allows Stored XSS.This issue affects Radio Player: from n/a through 2.0.73.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00336 Published 2024-03-27 No fix listed CWE-79

TI-2024-19547 CVE-2024-29771 · GHSA-9f92-7v43-m7j8

WordPress Dracula Dark Mode plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftLab Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress allows Stored XSS.This issue affects Drac…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00331 Published 2024-03-27 No fix listed CWE-79

TI-2023-28605 CVE-2023-52177 · GHSA-wv34-m534-j822

WordPress Integrate Google Drive plugin <= 1.3.3 - Broken Access Control vulnerability

LOW 28

Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00296 Published 2024-06-12 No fix listed CWE-862

TI-2023-25717 CVE-2023-47548 · GHSA-gh8c-xxj8-7q69

WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection

LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.Thi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0039 Published 2023-12-07 No fix listed CWE-601

TI-2024-22179 CVE-2024-33592 · GHSA-vwgw-65gp-7f8q

WordPress Radio Player plugin <= 2.0.73 - Server Side Request Forgery (SSRF) vulnerability

LOW 24

Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00322 Published 2024-04-25 No fix listed CWE-918

TI-2024-21393 CVE-2024-32506 · GHSA-rf4g-jrc7-7xv4

WordPress Radio Player plugin <= 2.0.73 - Sensitive Data Exposure vulnerability

LOW 24

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0035 Published 2024-04-17 No fix listed CWE-200

Open these records in search →

Critical	3
High	1
Medium	13
Low	0
No CVSS	0