Skip to content
OpenAdvisories

Vendor

sonaar

14 known vulnerabilities.

Products

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 7 MP3 Audio Player for Music, Radio & Podcast by Sonaar 6 Sonaar Music Plugin 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-81289

    WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.13.1 versions.

    sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar
  • High 7.2
    CVE-2023-54351

    WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments

    WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp…

    sonaar Sonaar Music Plugin
  • High 8.1
    CVE-2024-7856 EPSS 19%

    MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion

    The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the removeTempFiles() function and insufficient path validation on the 'file'…

    sonaar MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar Web / CMS