Skip to contentSonaar Mp3 Audio Player – Music Player, Podcast Player & Radio By Sonaar vulnerabilities
- sonaar mp3 audio player – music player, podcast player & radio by sonaarMP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesCVE-2026-167766.4 Medium
- sonaar mp3 audio player – music player, podcast player & radio by sonaarMP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information ExposureCVE-2026-12195.3 Medium
- sonaar mp3 audio player – music player, podcast player & radio by sonaarMP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request ForgeryCVE-2026-12495.0 Medium
- sonaar mp3 audio player – music player, podcast player & radio by sonaarMP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS FeedCVE-2024-131576.4 Medium
- sonaar mp3 audio player – music player, podcast player & radio by sonaar, mp3 audio player for music\, radio \& podcast +1 moreMP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer ShortcodeCVE-2024-102686.4 Medium
- sonaar mp3 audio player – music player, podcast player & radio by sonaar, mp3 audio player for music\, radio \& podcast +1 moreMP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File DeletionCVE-2024-7856EPSS 19.2%8.1 High
- sonaar mp3 audio player – music player, podcast player & radio by sonaar, mp3 audio player for music\, radio \& podcast +1 moreMP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer ShortcodeCVE-2024-56646.4 Medium