8.5 High

CVE-2025-32306 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio Player Shoutcast & Icecast WordPress Plugin audio4-html5 allows Blind SQL Injection.This issue affects Radio Player Shoutcast & Icecast WordPress Plugin: from n/a through <= 4.4.6.

Affected products and versions

Product	Affected versions	Fixed in
Radio Player Shoutcast & Icecast WordPress Plugin 4.4	earliest → 4.4.6	No fix stated

Do you use Radio Player Shoutcast & Icecast WordPress Plugin?

Track this CVE Watch Radio Player Shoutcast & Icecast WordPress Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2025-32306

Timeline

Published May 16, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE