Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player

Explore Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player vulnerabilities across all versions. Currently tracking 14 known vulnerabilities, including severity, impact, and patch status.

01234567891004.03.2022Today04.03.20226.3Freemius SDK <= 2.4.2 - Missing Authorization Checks CVSS 6.3 · 04.03.202218.07.20236.1Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get CVSS 6.1 · 18.07.202326.03.20245.3Radio Player <= 2.0.73 - Missing Authorization via get_players CVSS 5.3 · 26.03.202415.04.20244.3Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.73 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure CVSS 4.3 · 15.04.202425.04.20246.4Radio Player <= 2.0.73 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 25.04.20247.2Radio Player <= 2.0.73 - Unauthenticated Server-Side Request Forgery CVSS 7.2 · 25.04.202414.05.20245.3Radio Player <= 2.0.73 - Missing Authorization CVSS 5.3 · 14.05.202416.08.20245.3Radio Player <= 2.0.73 - Missing Authorization to Settings Update CVSS 5.3 · 16.08.20245.3Radio Player <= 2.0.73 - Missing Authorization to Player Deletion CVSS 5.3 · 16.08.20245.3Radio Player <= 2.0.73 - Missing Authorization to Player Update CVSS 5.3 · 16.08.202423.09.20246.4Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute CVSS 6.4 · 23.09.202412.12.20247.2Radio Player <= 2.0.83 - Unauthenticated Server-Side Request Forgery CVSS 7.2 · 12.12.202423.01.20267.2Radio Player <= 2.0.91 - Unauthenticated Server-Side Request Forgery CVSS 7.2 · 23.01.202630.04.20266.1Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVSS 6.1 · 30.04.2026

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage93%
Open

1

Fixed

13

Get automatic notifications for all Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player vulnerabilities before they are exploited.

Vulnerability Records

14 records
2026-04-30 17:17CVE-2024-13362
6.1
Medium
Asaf MozesYes
2026-01-23 00:00CVE-2026-24548
7.2
High
Nabil IrawanNo
2024-12-12 00:00CVE-2024-54385
7.2
High
Malvin Valerian GultomYes
2024-09-23 18:28CVE-2024-8267
6.4
Medium
Francesco CarlucciYes
2024-08-16 00:00CVE-2023-4027
5.3
Medium
Alex ThomasYes
2024-08-16 00:00CVE-2023-4024
5.3
Medium
Alex ThomasYes
2024-08-16 00:00CVE-2023-4025
5.3
Medium
Alex ThomasYes
2024-05-14 00:00CVE-2024-34753
5.3
Medium
Steven JulianYes
2024-04-25 00:00CVE-2024-29811
6.4
Medium
Abu Hurayra (HurayraIIT)Yes
2024-04-25 00:00CVE-2024-33592
7.2
High
Steven JulianYes
Showing 1–10 of 14 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C