Plugin icon

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar

mp3-music-player-by-sonaar

Vulnerabilities:

13

Last Updated:

April 17, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-02-18
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure
Fixed in
Fixed in 5.11
CVSS
5.3 (medium)
Published
2026-02-13
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery
Fixed in
Fixed in 5.11
CVSS
5 (medium)
Published
2025-04-04
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.9.5 - Missing Authorization
Fixed in
Fixed in 5.9.5
CVSS
4.3 (medium)
Published
2025-01-30
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar < 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed
Fixed in
Fixed in 5.9.4
CVSS
6.4 (medium)
Published
2024-12-30
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.9 - Missing Authorization
Fixed in
Fixed in 5.9
CVSS
4.3 (medium)
Published
2024-11-18
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar < 5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Fixed in
Fixed in 5.9
CVSS
6.4 (medium)
Published
2024-08-28
Title
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar < 5.7.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Fixed in
Fixed in 5.7.1
CVSS
8.1 (high)
Published
2024-07-09
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
Fixed in
Fixed in 5.6
CVSS
6.4 (medium)
Published
2024-04-05
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.0 - Unauthenticated Arbitrary File Download
Fixed in
Fixed in 5.0
CVSS
5.3 (medium)
Published
2024-03-29
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.1.1
CVSS
6.4 (medium)
Published
2024-03-28
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.1.1 - Missing Authorization
Fixed in
Fixed in 5.1.1
CVSS
4.3 (medium)
Published
2023-11-15
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 4.10.1 - Missing Authorization to Template Import
Fixed in
Fixed in 4.10.1
CVSS
5.4 (medium)
Published
2021-10-04
Title
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting
Fixed in
Fixed in 2.4.2
CVSS
2.7 (low)