CVE-2023-4027

Name of the Vulnerable Software and Affected Versions Radio Player plugin for WordPress versions up to, and including, 2.0.73

Description The issue allows unauthorized modification of data due to a missing capability check on the update settings function. This makes it possible for unauthenticated attackers to update plugin settings.

Recommendations For versions up to, and including, 2.0.73, update to a version that includes a fix for the missing capability check in the update settings function. As a temporary workaround, consider restricting access to the update settings function until a patch is available.