Vulnerability · Published Aug 29, 2024 · Assigned by Wordfence

CVE-2024-7856MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion

High 8.1

In plain English

A high-severity missing authorization in MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar from sonaar. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 19.2% (higher than 97% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)19.2%top 2.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the removeTempFiles() function and insufficient path validation on the 'file' parameter in all versions up to, and including, 5.7.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files which can make remote code execution possible when wp-config.php is deleted.

Affected products (as reported)

Vendor	Product	Versions
sonaar	MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar	0 – through 5.7.0.1

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

In plain English

Official description

Affected products (as reported)

References