{"id":"CVE-2024-56266","aliases":["EUVD-2024-53064","GHSA-8w3w-w736-7vh3"],"status":"published","title":"WordPress MP3 Audio Player plugin \u003c= 5.8 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar mp3-music-player-by-sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through \u003c= 5.8.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00337,"percentile":0.27412,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2025-01-02T12:01:31Z","modified":"2026-06-17T08:11:57Z","products":[{"vendor":"sonaar","product":"mp3 audio player for music, radio \u0026 podcast by sonaar"},{"vendor":"sonaar","product":"mp3_audio_player_for_music\\,_radio_\\\u0026_podcast"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/mp3-music-player-by-sonaar/vulnerability/wordpress-mp3-audio-player-plugin-5-8-broken-access-control-vulnerability?_s_id=cve","tags":["vdb-entry","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56266"},{"url":"https://patchstack.com/database/wordpress/plugin/mp3-music-player-by-sonaar/vulnerability/wordpress-mp3-audio-player-plugin-5-8-broken-access-control-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-8w3w-w736-7vh3"}],"sources":{"cve":[{"id":"CVE-2024-56266","title":"WordPress MP3 Audio Player plugin \u003c= 5.8 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar mp3-music-player-by-sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through \u003c= 5.8.","status":"published","published":"2025-01-02T12:01:31.084Z","modified":"2026-05-11T22:33:16.931Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:33:57.983942Z"}],"euvd":[{"id":"EUVD-2024-53064","description":"Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar mp3-music-player-by-sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through \u003c= 5.8.","status":"published","published":"2025-01-02T12:01:31Z","modified":"2026-05-11T22:33:16Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:04:42.120376Z"}],"ghsa":[{"id":"GHSA-8w3w-w736-7vh3","title":"Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio \u0026 Podcast...","description":"Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through 5.8.","status":"published","published":"2025-01-02T12:32:16Z","modified":"2025-01-02T12:32:25Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:59:19.638646Z"}],"nvd":[{"id":"CVE-2024-56266","description":"Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar mp3-music-player-by-sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio Player for Music, Radio \u0026 Podcast by Sonaar: from n/a through \u003c= 5.8.","status":"published","published":"2025-01-02T12:15:28.48Z","modified":"2026-06-17T08:11:57.1Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:10:41.489236Z"}]}}