CveMateVulnerability intelligence

Princeahmed vulnerabilities

14 vulnerabilities

Known vulnerabilities in Princeahmed products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.

Products

8

Radio Player – Live Shoutcast, Icecast And Any Audio Stream Player6 vulnerabilities
File Manager For Google Drive – Integrate Google Drive4 vulnerabilities
WP Radio – Worldwide Online Radio Stations Directory For Wordpress3 vulnerabilities
Integrate Google Drive2 vulnerabilities
Radio Player2 vulnerabilities
Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode For Wordpress1 vulnerabilities
Live TV Player – Worldwide Live TV Channels Player For Wordpress1 vulnerabilities
Podcast Box – Best Podcasting Plugin For Wordpress1 vulnerabilities

CVE-2025-54703princeahmedintegrate google drive+11y ago14-08-2025 10:34

Cross-Site Request Forgery (CSRF) vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Cross Site Request Forgery.This issue affects Integrate Google Drive: from n/a through <= 1.5.2.CVE-2025-12139princeahmedfile manager for google drive – integrate google drive+111mo ago05-11-2025 06:35

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "get_localize_data" function. This makes it possible for unauthenticated attackers to extract sensitive data including Google OAuth credentials (client_id and client_secret) and Google account email addresses.CVE-2022-49745starpluginseasy_age_verify+12392y ago16-10-2024 06:43

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.CVE-2024-54385princeahmedradio player+11y ago16-12-2024 14:31

Server-Side Request Forgery (SSRF) vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through <= 2.0.83.CVE-2024-2086princeahmedfile manager for google drive – integrate google drive+12y ago30-03-2024 04:31

The Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on multiple AJAX in all versions up to, and including, 1.3.8. This makes it possible for authenticated attackers to modify plugin settings as well as allowing full read/write/delete access to the Google Drive associated with the plugin.CVE-2024-13362100pluginsopen_user_map+2625mo ago01-05-2026 05:29

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.CVE-2024-1042princeahmedwp radio – worldwide online radio stations directory for wordpress+22y ago10-04-2024 04:30

The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 3.1.9. This makes it possible for authenticated attackers, with subscriber access and above, to import radio stations, remove countries, and modify the plugin's settings, which can lead to Cross-Site Scripting, tracked separately in CVE-2024-1041.CVE-2024-1041princeahmedwp radio – worldwide online radio stations directory for wordpress+22y ago10-04-2024 04:30

The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping as well as insufficient access control on the settings. This makes it possible for authenticated attackers, with subscriber access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2024-8267princeahmedradio player – live shoutcast, icecast and any audio stream player+22y ago24-09-2024 06:40

The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute within the 'wp:radio-player' Gutenberg block in all versions up to, and including, 2.0.78 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2026-24548princeahmedradio player+19mo ago23-01-2026 14:28

Server-Side Request Forgery (SSRF) vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through <= 2.0.91.CVE-2026-24540princeahmedintegrate google drive+19mo ago23-01-2026 14:28

Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through <= 1.5.6.CVE-2023-4027princeahmedradio player – live shoutcast, icecast and any audio stream player+22y ago17-08-2024 07:34

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_settings function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update plugin settings.CVE-2023-4024princeahmedradio player – live shoutcast, icecast and any audio stream player+22y ago17-08-2024 07:34

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to delete player instances.CVE-2023-4025princeahmedradio player – live shoutcast, icecast and any audio stream player+22y ago17-08-2024 07:34

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_player function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to update player instances.