Qt Kentharadio Vulnerabilities

The KenthaRadio theme for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully tric...

CVSS:

6.1

Affected:

up to 2.2.0

Fix:

No patched version reported

Disclosed:

Jan 13, 2026

CVE-2025-69003 on NVD →

The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will have the web server fetch and display the content from any URI, this would allow for SSRF (Server Side Request Forgery)...

CVSS:

9.8

Affected:

up to 2.0.2

Fixed in:

2.0.2

Disclosed:

Jun 28, 2021

CVE-2021-24472 on NVD →