princeahmed Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Latest princeahmed Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player vulnerabilities

CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
CVE-2026-24548 — WordPress Radio Player plugin <= 2.0.91 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.4)
CVE-2024-54385 — WordPress Radio Player plugin <= 2.0.83 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2)
CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
CVE-2024-8267 — Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute (CVSS 5.4)
CVE-2023-4027 — Radio Player <= 2.0.73 - Missing Authorization to Settings Update (CVSS 5.3)
CVE-2023-4025 — Radio Player <= 2.0.73 - Missing Authorization to Player Update (CVSS 5.3)
CVE-2023-4024 — Radio Player <= 2.0.73 - Missing Authorization to Player Deletion (CVSS 5.3)
CVE-2024-34753 — WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerability (CVSS 5.3)
CVE-2024-33592 — WordPress Radio Player plugin <= 2.0.73 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.4)
CVE-2024-32506 — WordPress Radio Player plugin <= 2.0.73 - Sensitive Data Exposure vulnerability (CVSS 5.4)
CVE-2024-29811 — WordPress Radio Player plugin <= 2.0.73 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)