Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MP3 Audio Player for Music, Radio & Podcast by Sonaar — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in MP3 Audio Player for Music, Radio & Podcast by Sonaar, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-104673 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-10-05
CVE-2026-81289 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-09-02
CVE-2026-65506 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-07-23
CVE-2026-39647 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability CWE-918 5.4 Medium 2026-04-08
CVE-2025-32235 WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability CWE-862 4.3 Medium 2025-04-04
CVE-2024-56266 WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerability CWE-862 6.3 Medium 2025-01-02
CVE-2023-47822 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability CWE-862 5.4 Medium 2024-12-09
CVE-2024-31343 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability CWE-862 7.5 High 2024-04-10
CVE-2024-30530 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-03-31
CVE-2024-30487 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Broken Access Control vulnerability CWE-862 7.6 High 2024-03-29
CVE-2021-24624 MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting CWE-79 4.8 - 2021-11-01

All 11 known CVE vulnerabilities affecting MP3 Audio Player for Music, Radio & Podcast by Sonaar with full Chinese analysis, references, and POCs where available.