{"id":"CVE-2025-32306","aliases":["EUVD-2025-15486","GHSA-95xf-mvwq-p849"],"status":"published","title":"WordPress Radio Player Shoutcast \u0026 Icecast theme \u003c= 4.4.6 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio Player Shoutcast \u0026 Icecast WordPress Plugin audio4-html5 allows Blind SQL Injection.This issue affects Radio Player Shoutcast \u0026 Icecast WordPress Plugin: from n/a through \u003c= 4.4.6.","severity":{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00335,"percentile":0.27113,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2025-05-16T15:45:29Z","modified":"2026-06-17T09:11:47Z","products":[{"vendor":"lambertgroup","product":"radio player shoutcast \u0026 icecast wordpress plugin"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/audio4-html5/vulnerability/wordpress-radio-player-shoutcast-icecast-wordpress-plugin-4-4-6-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32306"},{"url":"https://patchstack.com/database/wordpress/plugin/audio4-html5/vulnerability/wordpress-radio-player-shoutcast-icecast-wordpress-plugin-4-4-6-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-95xf-mvwq-p849"}],"sources":{"cve":[{"id":"CVE-2025-32306","title":"WordPress Radio Player Shoutcast \u0026 Icecast theme \u003c= 4.4.6 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio Player Shoutcast \u0026 Icecast WordPress Plugin audio4-html5 allows Blind SQL Injection.This issue affects Radio Player Shoutcast \u0026 Icecast WordPress Plugin: from n/a through \u003c= 4.4.6.","status":"published","published":"2025-05-16T15:45:29.365Z","modified":"2026-04-28T16:12:21.611Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:46.109993Z"}],"euvd":[{"id":"EUVD-2025-15486","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio Player Shoutcast \u0026 Icecast WordPress Plugin audio4-html5 allows Blind SQL Injection.This issue affects Radio Player Shoutcast \u0026 Icecast WordPress Plugin: from n/a through \u003c= 4.4.6.","status":"published","published":"2025-05-16T15:45:29Z","modified":"2026-04-28T16:12:21Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:05:44.687499Z"}],"ghsa":[{"id":"GHSA-95xf-mvwq-p849","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio Player Shoutcast \u0026 Icecast WordPress Plugin allows Blind SQL Injection. This issue affects Radio Player Shoutcast \u0026 Icecast WordPress Plugin: from n/a through 4.4.6.","status":"published","published":"2025-05-16T18:31:07Z","modified":"2025-05-16T18:31:11Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:02:19.907667Z"}],"nvd":[{"id":"CVE-2025-32306","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio Player Shoutcast \u0026 Icecast WordPress Plugin audio4-html5 allows Blind SQL Injection.This issue affects Radio Player Shoutcast \u0026 Icecast WordPress Plugin: from n/a through \u003c= 4.4.6.","status":"published","published":"2025-05-16T16:15:39.637Z","modified":"2026-06-17T09:11:47.15Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:08.321805Z"}]}}