Log in Start free

Sonaar

Products

ProductCVEsExploitedLatest
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar7–Oct 10, 2026
MP3 Audio Player for Music, Radio & Podcast by Sonaar6–Oct 5, 2026
Sonaar Music Plugin1–Jun 8, 2026

Exploited and recent CVEs

  • CVE-2026-16776 Medium 6.4 MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
  • CVE-2026-104673 Medium 6.5 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-81289 High 7.1 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-65506 Medium 5.3 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability 0.3%
  • CVE-2023-54351 High 7.2 WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments 0.2%
  • CVE-2026-39647 Medium 5.4 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2026-1219 Medium 5.3 MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure 0.3%
  • CVE-2026-1249 Medium 5.0 MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery 0.2%
  • CVE-2025-32235 Medium 4.3 WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability 0.4%
  • CVE-2024-13157 Medium 6.4 MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed 0.4%
  • CVE-2024-56266 Medium 6.3 WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerability 0.3%
  • CVE-2024-10268 Medium 6.4 MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode 0.4%
  • CVE-2024-7856 High 8.1 MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion 19.2%
  • CVE-2024-5664 Medium 6.4 MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode 0.3%