Skip to content
Sonaar vulnerabilities
Newest
-
sonaar mp3 audio player – music player, podcast player & radio by sonaar
MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-16776
6.4 Medium
-
sonaar mp3 audio player for music, radio & podcast by sonaar
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-104673
6.5 Medium
-
sonaar mp3 audio player for music, radio & podcast by sonaar
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81289
7.1 High
-
sonaar mp3 audio player for music, radio & podcast by sonaar
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability
CVE-2026-65506
5.3 Medium
-
sonaar music plugin
WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments
CVE-2023-54351
5.1 Medium
-
sonaar mp3 audio player for music, radio & podcast by sonaar
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39647
5.4 Medium
-
sonaar mp3 audio player – music player, podcast player & radio by sonaar
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure
CVE-2026-1219
5.3 Medium
-
sonaar mp3 audio player – music player, podcast player & radio by sonaar
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery
CVE-2026-1249
5.0 Medium
-
sonaar mp3 audio player for music, radio & podcast by sonaar
WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability
CVE-2025-32235
4.3 Medium
-
sonaar mp3 audio player – music player, podcast player & radio by sonaar
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed
CVE-2024-13157
6.4 Medium
-
sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 more
WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerability
CVE-2024-56266
6.3 Medium
-
sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 more
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability
CVE-2023-47822
5.4 Medium
-
sonaar mp3 audio player – music player, podcast player & radio by sonaar, mp3 audio player for music\, radio \& podcast +1 more
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
CVE-2024-10268
6.4 Medium
-
sonaar mp3 audio player – music player, podcast player & radio by sonaar, mp3 audio player for music\, radio \& podcast +1 more
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
CVE-2024-7856
EPSS 19.2%
8.1 High
-
sonaar mp3 audio player – music player, podcast player & radio by sonaar, mp3 audio player for music\, radio \& podcast +1 more
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
CVE-2024-5664
6.4 Medium
-
sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 more
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability
CVE-2024-31343
7.5 High
-
sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 more
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-30530
6.5 Medium
-
sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 more
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Broken Access Control vulnerability
CVE-2024-30487
7.6 High
-
sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 more
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting
CVE-2021-24624
4.8 Medium