VendorsSonaarmp3_audio_player_for_music%5C%2C_radio_%5C%26_podcastall versions
Vulnerabilities

Sonaar MP3 Audio Player for Music, Radio & Podcast

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

9CVEs
CVE-2023-47822
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability
Published 2024-12-09 · Analyzed
8.8EPSS 0.004
CVE-2024-56266
WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerability
Published 2025-01-02 · Modified
8.8EPSS 0.003
CVE-2024-7856
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Published 2024-08-29 · Modified
8.1EPSS 0.192
CVE-2024-30487
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Broken Access Control vulnerability
Published 2024-03-29 · Modified
7.6EPSS 0.005
CVE-2024-31343
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability
Published 2024-04-10 · Modified
7.5EPSS 0.006
CVE-2024-30530
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-31 · Modified
6.5EPSS 0.003
CVE-2024-10268
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Published 2024-11-19 · Analyzed
6.4EPSS 0.004
CVE-2024-5664
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Published 2024-07-10 · Modified
6.4EPSS 0.003
CVE-2021-24624
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting
Published 2021-11-01 · Modified
4.8EPSS 0.006