Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress, CVE-2023-4027

CVE, Research URL: CVE-2023-4027
Home page URL: Security reports for Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress
Application: Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress
Published on: Aug 17, 2024
Research Description: The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_settings function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update plugin settings.
Affected versions: max 2.0.74.
Status: vulnerable

Radio Player &#8211; Live Shoutcast, Icecast and Any Audio Stream Player for WordPress, CVE-2023-4027