Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-39647 EUVD-2026-20309GHSA-878h-x39v-9rfh

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Server-Side Request Forgery (SSRF) vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Server Side Request Forgery.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through <= 5.11.

Affected products

VendorProductAffectedFixed
sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar ≤ 5.11 —

References