WordPress plugin
LUNA RADIO PLAYER security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium1
- Low0
All LUNA RADIO PLAYER vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤6.24.11.07Update to 6.24.11.15 | CVE-2024-10881 | |
| High7.5 | Unauthenticated Arbitrary File Read ≤6.24.01.24Update to 6.24.11.07 | CVE-2024-10816 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤6.24.11.07Update to 6.24.11.15
- High7.5Unauthenticated Arbitrary File Read
≤6.24.01.24Update to 6.24.11.07
LUNA RADIO PLAYER: common questions
Does LUNA RADIO PLAYER have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in LUNA RADIO PLAYER: 1 high, 1 medium. None are known to affect version null.
How do I check which version of LUNA RADIO PLAYER I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent LUNA RADIO PLAYER vulnerability?
CVE-2024-10881, published Nov 15, 2024: LUNA RADIO PLAYER <= 6.24.11.07 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode. Severity: Medium (CVSS 6.4).
Is any LUNA RADIO PLAYER vulnerability listed in CISA KEV?
No. None of the known LUNA RADIO PLAYER vulnerabilities is currently listed in the CISA KEV catalog.