Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Theme security history

Onair2: Radio Station WordPress Theme With Non-Stop Music Player Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 1 vulnerability records associated with Onair2: Radio Station WordPress Theme With Non-Stop Music Player, published between 2021 and 2021.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

1Total records
1Critical
0High
0Medium
0Low
0Informational
1Patched records
0Currently marked unpatched
2021-06-28First disclosure
2021-06-28Latest disclosure
1 of 1CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202111 records

Severity Breakdown

SeverityRecordsShare
Critical1100%

Vulnerability-Type Breakdown

Other

1 record100%

First: 2021. Latest: 2021.

Patch Status

Patched
1
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 3.9.9.2

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
[*, 3.9.9.2)QT KenthaRadio < 2.0.2 & OnAir2 < 3.9.9.2 - Server-Side Request Forgery & Remote File InclusionJune 28, 20213.9.9.2Critical

Selected source records

Latest Records

CriticalCVE-2021-24472

QT KenthaRadio < 2.0.2 & OnAir2 < 3.9.9.2 - Server-Side Request Forgery & Remote File Inclusion

Published: June 28, 2021

Affected versions
[*, 3.9.9.2)
Patched versions
3.9.9.2
Affected versions
[*, 2.0.2)
Patched versions
2.0.2
Original Wordfence record

Highest-Severity Records

CriticalCVE-2021-24472

QT KenthaRadio < 2.0.2 & OnAir2 < 3.9.9.2 - Server-Side Request Forgery & Remote File Inclusion

Published: June 28, 2021

Affected versions
[*, 3.9.9.2)
Patched versions
3.9.9.2
Affected versions
[*, 2.0.2)
Patched versions
2.0.2
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory