CVE-2024-8267

概要

参考情報

• plugins.trac.wordpress.org/browser/radio-player/trunk/block/class-block.php · Product
• plugins.trac.wordpress.org/changeset/3152379 · Patch
• plugins.trac.wordpress.org/changeset/3152379/radio-player/trunk/block/class-block.php · Patch
• wordpress.org/plugins/radio-player · Product
• wordfence.com/threat-intel/vulnerabilities/id/49581614-14a8-4450-8f83-d8d22a3feee9 · Third Party Advisory

radio player のその他の脆弱性

• CVE-2023-4027中 5.3The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_set…
• CVE-2023-4025中 5.3The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_pla…
• CVE-2023-4024中 5.3The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_pla…
• CVE-2024-34753中 5.3Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
• CVE-2024-29811中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftLab Radio Player allows Stored XSS…