CVE-2026-65506
MediumCVSS 5.3Summary
The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin versions 5.12 and earlier have an unauthenticated broken access control vulnerability. Unauthenticated users can gain unauthorized access to functions or data.
Risk Assessment
The risk includes the possibility of unauthorized access to sensitive functions or data, potentially leading to information leakage or content manipulation.
Recommendation
It is recommended to update the MP3 Audio Player by Sonaar plugin to a version newer than 5.12 that fixes this vulnerability.
Other vulnerabilities in MP3 Audio Player for Music, Radio & Podcast by Sonaar
See all- CVE-2026-81289High
Unauthenticated XSS vulnerability in MP3 Audio Player for Music, Radio & Podcast by Sonaar versions up to 5.13.1. An attacker can inject a malicious script that executes in the victim's browser.
- CVE-2026-39647Medium
The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF). An attacker can force the server to send requests to internal resources.
Original NVD description (English source)
Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions.