SO
Vendor
sonaar
23
CVEs
0
On KEV
2
New 30D
Products
MA8.1
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
sonaar
7 CVEs0 on KEV1 new
MA8.8
MP3 Audio Player for Music, Radio & Podcast by Sonaar
sonaar
6 CVEs0 on KEV1 new
MA8.8
Mp3 Audio Player For Music, Radio & Podcast
Sonaar
9 CVEs0 on KEV0 new
SM7.2
Sonaar Music Plugin
Sonaar
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-16776 | MA MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar sonaar | 6.4 | Oct 10 | MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes |
| CVE-2026-104673 | MA MP3 Audio Player for Music, Radio & Podcast by Sonaar Sonaar | 6.5 | Oct 5 | WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-81289 | MA MP3 Audio Player for Music, Radio & Podcast by Sonaar sonaar | 7.1 | Sep 2 | WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-65506 | MA MP3 Audio Player for Music, Radio & Podcast by Sonaar sonaar | 5.3 | Jul 23 | WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability |
| CVE-2023-54351 | SM Sonaar Music Plugin Sonaar | 7.2 | Jun 8 | WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments |
| CVE-2026-39647 | MA MP3 Audio Player for Music, Radio & Podcast by Sonaar sonaar | 5.4 | Apr 8 | WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2026-1219 | MA MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar sonaar | 5.3 | Feb 19 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure |
| CVE-2026-1249 | MA MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar sonaar | 5.0 | Feb 14 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery |
| CVE-2025-32235 | MA MP3 Audio Player for Music, Radio & Podcast by Sonaar sonaar | 4.3 | Apr 4 | WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability |
| CVE-2024-13157 | MA MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar sonaar | 6.4 | Jan 31 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed |
| CVE-2024-56266 | MA MP3 Audio Player for Music, Radio & Podcast by Sonaar sonaar | 8.8 | Jan 2 | WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerability |
| CVE-2023-47822 | MA Mp3 Audio Player For Music, Radio & Podcast Sonaar | 8.8 | Dec 9 | WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability |
| CVE-2024-10268 | MA MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar sonaar | 5.4 | Nov 19 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode |
| CVE-2024-7856 | MA MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar sonaar | 8.1 | Aug 29 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion |
| CVE-2024-5664 | MA MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar sonaar | 5.4 | Jul 10 | MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode |
| CVE-2024-31343 | MA Mp3 Audio Player For Music, Radio & Podcast Sonaar | 7.5 | Apr 10 | WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability |
| CVE-2024-30530 | MA Mp3 Audio Player For Music, Radio & Podcast Sonaar | 5.4 | Mar 31 | WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-30487 | MA Mp3 Audio Player For Music, Radio & Podcast Sonaar | 7.6 | Mar 29 | WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Broken Access Control vulnerability |
| CVE-2021-24624 | MA Mp3 Audio Player For Music, Radio & Podcast Sonaar | 4.8 | Nov 1 | MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting |