princeahmed vulnerabilities

CVEs per yearBy the year they were published

1. 20249
2. 20252
3. 20263

Newest CVEs

• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-24548

  WordPress Radio Player plugin <= 2.0.91 - Server Side Request Forgery (SSRF) vulnerability

  princeahmed · Radio Player

  Medium5.4
• CVE-2026-24540

  WordPress Integrate Google Drive plugin <= 1.5.6 - Broken Access Control vulnerability

  princeahmed · Integrate Google Drive

  Medium5.4
• CVE-2025-12139

  File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure

  princeahmed · File Manager for Google Drive – Integrate Google Drive

  High7.5
• CVE-2025-54703

  WordPress Integrate Google Drive plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) vulnerability

  princeahmed · Integrate Google Drive

  Medium4.3
• CVE-2024-54385

  WordPress Radio Player plugin <= 2.0.83 - Server Side Request Forgery (SSRF) vulnerability

  princeahmed · Radio Player

  High7.2
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-8267

  Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute

  princeahmed · Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player

  Medium6.4
• CVE-2023-4025

  Radio Player <= 2.0.73 - Missing Authorization to Player Update

  princeahmed · Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player

  Medium5.3
• CVE-2023-4024

  Radio Player <= 2.0.73 - Missing Authorization to Player Deletion

  princeahmed · Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player

  Medium5.3