High · 7.1 CVE-2026-81289 EUVD-2026-69925GHSA-c2mm-3m3r-hgg8

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by Patchstack

Description

Unauthenticated Cross Site Scripting (XSS) in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.13.1 versions.

Vendor	Product	Affected	Fixed
sonaar	MP3 Audio Player for Music, Radio & Podcast by Sonaar	≤ 5.13.1	—