Skip to content
Noroxi

sonaar records

9 published records for vendor sonaar.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
55.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2024-7856
    38Monitor

    MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion

    HighCVSS 8.1Proof of conceptEPSS 19%

    sonaar · mp3 audio player for music\, radio \& podcastAug 29, 2024

  • CVE-2023-47822
    35Monitor

    WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    sonaar · mp3 audio player for music\, radio \& podcastDec 9, 2024

  • CVE-2024-56266
    35Monitor

    WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    sonaar · mp3 audio player for music\, radio \& podcastJan 2, 2025

  • CVE-2024-31343
    30Monitor

    WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    sonaar · mp3 audio player for music\, radio \& podcastApr 10, 2024

  • CVE-2024-30487
    30Monitor

    WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Broken Access Control vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    sonaar · mp3 audio player for music\, radio \& podcastMar 29, 2024

  • CVE-2024-10268
    21Monitor

    MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Short

    MediumCVSS 5.4No exploitEPSS 0%

    sonaar · mp3 audio player for music\, radio \& podcastNov 19, 2024

  • CVE-2024-30530
    21Monitor

    WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    sonaar · mp3 audio player for music\, radio \& podcastMar 31, 2024

  • CVE-2024-5664
    21Monitor

    MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    sonaar · mp3 audio player for music\, radio \& podcastJul 10, 2024

  • CVE-2021-24624
    19Monitor

    MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    sonaar · mp3 audio player for music\, radio \& podcastNov 1, 2021