Log in Start free

princeahmed

Products

ProductCVEsExploitedLatest
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player5–May 1, 2026
File Manager for Google Drive – Integrate Google Drive3–May 1, 2026
Integrate Google Drive2–Jan 23, 2026
Radio Player2–Jan 23, 2026
WP Radio – Worldwide Online Radio Stations Directory for WordPress2–Apr 10, 2024
Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress1–May 1, 2026

Exploited and recent CVEs

  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2026-24548 Medium 5.4 WordPress Radio Player plugin <= 2.0.91 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2026-24540 Medium 5.4 WordPress Integrate Google Drive plugin <= 1.5.6 - Broken Access Control vulnerability 0.3%
  • CVE-2025-12139 High 7.5 File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure 2.5%
  • CVE-2025-54703 Medium 4.3 WordPress Integrate Google Drive plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2024-54385 High 7.2 WordPress Radio Player plugin <= 2.0.83 - Server Side Request Forgery (SSRF) vulnerability 5.5%
  • CVE-2024-8267 Medium 6.4 Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute 0.3%
  • CVE-2023-4025 Medium 5.3 Radio Player <= 2.0.73 - Missing Authorization to Player Update 0.4%
  • CVE-2023-4024 Medium 5.3 Radio Player <= 2.0.73 - Missing Authorization to Player Deletion 0.5%
  • CVE-2023-4027 Medium 5.3 Radio Player <= 2.0.73 - Missing Authorization to Settings Update 0.4%
  • CVE-2024-1042 Medium 6.4 WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions 0.4%
  • CVE-2024-1041 Medium 6.4 WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Settings 0.4%
  • CVE-2024-2086 Critical 10.0 Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export 0.7%