Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-32235 EUVD-2025-9808GHSA-74cg-qw7q-36rg

WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability

Published Apr 4, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through <= 5.9.4.

Affected products

VendorProductAffectedFixed
sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar ≤ 5.9.4 —

References