WordPress Sonaar MP3 Audio Player <=5.14.2 Stored XSS Vulnerability Advisory

Vulnerability Overview Vulnerability Name: WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar Plugin <= 5.14.2 Cross-Site Scripting (XSS) Vulnerability. Vulnerability Type: Cross-Site Scripting (XSS). CVSS Score: 6.5. Priority: Low priority, no major threat. Impact Scope Affected Versions: 5.14.2 and earlier versions. Fixed Versions: 5.15 and later versions. Risk Description: Attackers can inject malicious scripts into the website to steal visitor data or hijack their accounts. User Interaction Required: User interaction is required, such as clicking a malicious link, visiting a specially crafted page, or submitting a form. Remediation Recommended Action: Immediately update the affected plugin. If you cannot update it yourself, contact your hosting provider or web developer for assistance. Specific Steps: Update to version 5.15 or higher to resolve the vulnerability. Patchstack users can enable the automatic update feature to automatically update only the affected plugins. Timeline Report Date: September 25, 2026, reported by Ananda Dhakal (Patchstack). Early Warning: October 5, 2026, early warning sent to Patchstack customers. Publication Date: October 5, 2026, published by Patchstack. Additional Information Software Type: WordPress Plugin. Software Name: MP3 Audio Player for Music, Radio & Podcast by Sonaar. Vulnerability Details: Click "Expand full details" to view the complete vulnerability details. Contact Information More Information: For additional information or questions, contact Patchstack. Subscription Subscription Service: Subscribe to receive weekly WordPress security intelligence reports via email. Footer Information Navigation Links: Include options such as Pricing, Case Studies, Login, and Free Trial. Resource Links: Provide links to Vulnerability Mitigation, Code Security, Bug Bounty, Use Cases, and Resources. Company Information: Include links to About, Compliance, Careers, Media Kit, LinkedIn, Facebook, and X. Summary This vulnerability is of low priority but requires timely plugin updates to avoid potential risks. Users are advised to update to version 5.15 or higher as soon as possible and enable automatic updates to ensure security.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Sonaar MP3 Audio Player <=5.14.2 Stored XSS Vulnerability Advisory

More from this source