Read the docs

SoftLab

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

SoftLab records in CISA KEV

No SoftLab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Radio Player 6 records LOW Integrate Google Drive 4 records MEDIUM Upload Fields For Wpforms 1 record MEDIUM

Records

6 records in Radio Player · all components

TI-2024-07663 CVE-2024-8267 · GHSA-wv6w-qmjm-mqmv

Cross-site scripting in princeahmed Radio Player – Live Shoutcast, Icecast and Any Audio…

Priority LOW 34

The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute within the 'wp:radio-player' Gutenberg bloc…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-09-24 No fix listed CWE-79
TI-2023-03736 CVE-2023-4024 · GHSA-chr5-xqvr-7wp2

Radio Player <= 2.0.73 - Missing Authorization to Player Deletion

Priority LOW 31

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_player function in versions up to, and including, 2.0.73.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00504 Published 2024-08-17 No fix listed CWE-862
TI-2023-03738 CVE-2023-4027 · GHSA-gpq7-v9v5-ggrx

Radio Player <= 2.0.73 - Missing Authorization to Settings Update

Priority LOW 30

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_settings function in versions up to, and including, 2.0.73.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0041 Published 2024-08-17 No fix listed CWE-862
TI-2023-03737 CVE-2023-4025 · GHSA-gp4m-387m-p46x

Radio Player <= 2.0.73 - Missing Authorization to Player Update

Priority LOW 30

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_player function in versions up to, and including, 2.0.73.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0041 Published 2024-08-17 No fix listed CWE-862
TI-2024-19587 CVE-2024-29811 · GHSA-v8pj-77q3-8742

WordPress Radio Player plugin <= 2.0.73 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftLab Radio Player allows Stored XSS.This issue affects Radio Player: from n/a through 2.0.73.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00336 Published 2024-03-27 No fix listed CWE-79
Open these records in search →