<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: wp radio</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-1042: The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to u</title><link>https://patchthecve.com/cve/CVE-2024-1042.html</link><guid>https://patchthecve.com/cve/CVE-2024-1042.html</guid><pubDate>Wed, 17 Jun 2026 07:03:18 +0000</pubDate><description>MEDIUM 6.4: The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 3.1.9. This makes it possible for authenticated attackers,</description></item><item><title>CVE-2024-1041: The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to S</title><link>https://patchthecve.com/cve/CVE-2024-1041.html</link><guid>https://patchthecve.com/cve/CVE-2024-1041.html</guid><pubDate>Wed, 17 Jun 2026 07:03:18 +0000</pubDate><description>MEDIUM 6.4: The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#x27;s settings in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping as well as insufficient access con</description></item><item><title>CVE-2023-46150: Cross-Site Request Forgery (CSRF) vulnerability in WP Military WP Radio plugin &lt;= 3.1.9 versions.</title><link>https://patchthecve.com/cve/CVE-2023-46150.html</link><guid>https://patchthecve.com/cve/CVE-2023-46150.html</guid><pubDate>Wed, 17 Jun 2026 06:30:15 +0000</pubDate><description>MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in WP Military WP Radio plugin &lt;= 3.1.9 versions.</description></item></channel></rss>