Approved changes feed: RSS · Atom

cpe:2.3:a:sodahead:luna_radio_player:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSodahead (aa7092ac-a574-5d94-84bd-e1ff9e1c854f)
ProductLuna Radio Player (7e8d80f4-d33a-5375-84cd-194649a5f0ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10816 vulnerable 2026-06-08 06:23:47.638182 LUNA RADIO PLAYER <= 6.24.01.24 - Unauthenticated Arbitrary File Read
HIGH (7.5)
The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.24.01.24 via the js/fallback.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
Published: 2024-11-13T03:30:10.803Z
Updated: 2026-04-08T16:53:18.805Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.