Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

princeahmed Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2024-13362`Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter	Exploitation statusNot known exploited	FixYes	Affected productDracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress	Published05/01/2026	SeverityMedium
`CVE-2026-24548`WordPress Radio Player plugin <= 2.0.91 - Server Side Request Forgery (SSRF) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRadio Player	Published01/23/2026	SeverityMedium
`CVE-2026-24540`WordPress Integrate Google Drive plugin <= 1.5.6 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productIntegrate Google Drive	Published01/23/2026	SeverityMedium
`CVE-2025-12139`File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure	Exploitation statusNot known exploited	FixYes	Affected productFile Manager for Google Drive – Integrate Google Drive	Published11/05/2025	SeverityHigh
`CVE-2025-54703`WordPress Integrate Google Drive plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productIntegrate Google Drive	Published08/14/2025	SeverityMedium
`CVE-2024-54385`WordPress Radio Player plugin <= 2.0.83 - Server Side Request Forgery (SSRF) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRadio Player	Published12/16/2024	SeverityHigh
`CVE-2023-32117`WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productIntegrate Google Drive	Published12/09/2024	SeverityCritical
`CVE-2022-4974`Freemius SDK <= 2.4.2 - Missing Authorization Checks	Exploitation statusNot known exploited	FixYes	Affected productWP Radio – Worldwide Online Radio Stations Directory for WordPress	Published10/16/2024	SeverityMedium
`CVE-2024-8267`Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute	Exploitation statusNot known exploited	FixYes	Affected productRadio Player – Live Shoutcast, Icecast and Any Audio Stream Player	Published09/24/2024	SeverityMedium
`CVE-2023-4025`Radio Player <= 2.0.73 - Missing Authorization to Player Update	Exploitation statusNot known exploited	FixYes	Affected productRadio Player – Live Shoutcast, Icecast and Any Audio Stream Player	Published08/17/2024	SeverityMedium
`CVE-2023-4024`Radio Player <= 2.0.73 - Missing Authorization to Player Deletion	Exploitation statusNot known exploited	FixYes	Affected productRadio Player – Live Shoutcast, Icecast and Any Audio Stream Player	Published08/17/2024	SeverityMedium
`CVE-2023-4027`Radio Player <= 2.0.73 - Missing Authorization to Settings Update	Exploitation statusNot known exploited	FixYes	Affected productRadio Player – Live Shoutcast, Icecast and Any Audio Stream Player	Published08/17/2024	SeverityMedium
`CVE-2024-1042`WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions	Exploitation statusNot known exploited	FixYes	Affected productWP Radio – Worldwide Online Radio Stations Directory for WordPress	Published04/10/2024	SeverityMedium
`CVE-2024-1041`WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Settings	Exploitation statusNot known exploited	FixYes	Affected productWP Radio – Worldwide Online Radio Stations Directory for WordPress	Published04/10/2024	SeverityMedium
`CVE-2024-2086`Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export	Exploitation statusNot known exploited	FixYes	Affected productFile Manager for Google Drive – Integrate Google Drive	Published03/30/2024	SeverityCritical