All packages
MP3 Audio Player for Music, Radio & Podcast by Sonaar vulnerabilities
3 known CVE vulnerabilities in MP3 Audio Player for Music, Radio & Podcast by Sonaar, translated and rated.
- CVE-2026-81289High
Unauthenticated XSS vulnerability in MP3 Audio Player for Music, Radio & Podcast by Sonaar versions up to 5.13.1. An attacker can inject a malicious script that executes in the victim's browser.
- CVE-2026-65506Medium
The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin versions 5.12 and earlier have an unauthenticated broken access control vulnerability. Unauthenticated users can gain unauthorized access to functions or data.
- CVE-2026-39647Medium
The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF). An attacker can force the server to send requests to internal resources.