Music Request Manager (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-09-12. Vendor: Unknown.

CVEs of Music Request Manager

• CVE-2024-6019 - CVSS 6.1 (medium), 2024-09-12: The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to…
• CVE-2024-6018 - CVSS 6.1 (medium), 2024-09-12: The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which…
• CVE-2024-6017 - CVSS 6.1 (medium), 2024-09-12: The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could…