Filtered by vendor Softlab Subscriptions
Total 9 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-33592 2 Softlab, Wordpress 2 Radio Player, Wordpress 2025-07-12 5.4 Medium
Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
CVE-2024-54385 1 Softlab 1 Radio Player 2024-12-16 7.2 High
Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through 2.0.82.
CVE-2023-32117 1 Softlab 1 Integrate Google Drive 2024-12-09 9.8 Critical
Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through 1.1.99.
CVE-2024-32813 1 Softlab 1 Integrate Google Drive 2024-11-21 5.3 Medium
Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.9.
CVE-2024-32506 2 Softlab, Wordpress 2 Radio Player, Wordpress 2024-11-21 5.4 Medium
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
CVE-2024-2906 2 Softlab, Wordpress 2 Radio Player, Wordpress 2024-11-21 6.5 Medium
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
CVE-2023-4027 2 Softlab, Softlabbd 2 Radio Player, Radio Player 2024-09-12 5.3 Medium
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_settings function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update plugin settings.
CVE-2023-4024 2 Softlab, Softlabbd 2 Radio Player, Radio Player 2024-08-28 5.3 Medium
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to delete player instances.
CVE-2023-4025 2 Softlab, Softlabbd 2 Radio Player, Radio Player 2024-08-28 5.3 Medium
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update player instances.