CVE-2026-81289
HighCVSS 7.1Summary
Unauthenticated XSS vulnerability in MP3 Audio Player for Music, Radio & Podcast by Sonaar versions up to 5.13.1. An attacker can inject a malicious script that executes in the victim's browser.
Risk Assessment
Risk of data theft, session hijacking, or malware distribution.
Recommendation
Update the plugin to the latest version with the fix.
Other vulnerabilities in MP3 Audio Player for Music, Radio & Podcast by Sonaar
See all- CVE-2026-65506Medium
The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin versions 5.12 and earlier have an unauthenticated broken access control vulnerability. Unauthenticated users can gain unauthorized access to functions or data.
- CVE-2026-39647Medium
The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF). An attacker can force the server to send requests to internal resources.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.13.1 versions.