Codescar Radio Widget

Codescar Radio Widget has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Codescar Radio Widget has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by SOPROBRO. Codescar Radio Widget is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.9.40.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Codescar Radio Widget vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-32500

Codescar Radio Widget <= 0.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-04-09 00:00	Codescar Radio Widget <= 0.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting Codescar Radio Widget <= 0.4.2	`CVE-2025-32500`	6.1 Medium	SOPROBRO	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv0.4.2

Codescar Radio Widget

Author

Sudavar

5.0(2)

100/100

Last Updated

2015-03-30 (12y ago)

Active Installs

80+

Downloads

10,345

Requires WP

3.0.1+

Requires PHP

Tested up to

WP 3.9.40

Created

2014-07-10 (12y ago)

Codescar Radio Widget produces a widget for your wordpress site allowing your users listen to a radio station from your website. It uses html5 audio element to play radio in sidebar. Features: Admin can select default station, set initial volume and autoplay or not. Control of the radio stations available from an options page (Adding / Removing from db) Soon to add: Maybe a fallback to play asx streams. HTML5 can’t play them yet.

View on WordPress.org