CVE-2023-4025
EUVD-2023-5391817.08.2024, 08:15
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update player instances.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| softlab | radio_player | 𝑥 ≤ 2.0.73 |
| softlabbd | radio_player | 𝑥 < 2.0.74 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References