Vulnerabilities (CVE)

Filtered by vendor Softlabbd Subscribe
Total 8 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-29811 1 Softlabbd 1 Radio Player 2025-05-13 N/A 6.5 MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftLab Radio Player allows Stored XSS.This issue affects Radio Player: from n/a through 2.0.73.
CVE-2024-35670 1 Softlabbd 1 Integrate Google Drive 2024-11-21 N/A 5.3 MEDIUM
Broken Authentication vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.93.
CVE-2024-35661 1 Softlabbd 1 Upload Fields For Wpforms 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in SoftLab Upload Fields for WPForms.This issue affects Upload Fields for WPForms: from n/a through 1.0.2.
CVE-2024-34753 1 Softlabbd 1 Radio Player 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
CVE-2023-49769 1 Softlabbd 1 Integrate Google Drive 2024-11-21 N/A 4.3 MEDIUM
Cross-Site Request Forgery (CSRF) vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4.
CVE-2023-4027 1 Softlabbd 1 Radio Player 2024-09-12 N/A 5.3 MEDIUM
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_settings function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update plugin settings.
CVE-2023-4024 1 Softlabbd 1 Radio Player 2024-08-28 N/A 5.3 MEDIUM
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to delete player instances.
CVE-2023-4025 1 Softlabbd 1 Radio Player 2024-08-28 N/A 5.3 MEDIUM
The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update player instances.