WP Radio – Worldwide Online Radio Stations Directory for WordPress

WP Radio – Worldwide Online Radio Stations Directory for WordPress has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; 1 is fixed and 4 remain unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (60%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

1 of the records (20%) have a vendor fix, while 4 remain unpatched. The oldest unresolved one dates back to 2023.

3 independent researchers contributed these findings, most of them (2) reported by Lucio Sá.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage20%

Open

Fixed

Get automatic notifications for all WP Radio – Worldwide Online Radio Stations Directory for WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-1042

WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions

Read the full analysis

Vulnerability Records

5 records


2024-04-09 00:00	WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions WP Radio <= 3.1.9	`CVE-2024-1042`	6.4 Medium	Lucio Sá	No
2024-04-09 00:00	WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Settings WP Radio <= 3.1.9	`CVE-2024-1041`	6.4 Medium	Lucio Sá	No
2023-10-17 00:00	WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Cross-Site Request Forgery WP Radio <= 3.1.9	`CVE-2023-46150`	4.3 Medium	Nguyen Xuan Chien	No
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get WP Radio 2.0.7 – 3.1.9	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	No
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks WP Radio < 3.1.4	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–5 of 5 reports