MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar

Güvenlik açıkları

• CVE-2024-56266giriş gerekir≤ 5.8

  WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2023-47822giriş gerekir≤ 4.10

  WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2024-7856abone+≤ 5.7.0.1

  MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion

  Yüksek 8.1

• CVE-2024-30487giriş gerekir≤ 5.1

  WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Broken Access Control vulnerability

  Yüksek 7.6

• CVE-2024-31343kimlik doğrulamasız≤ 4.10.1

  WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability

  Yüksek 7.5

• CVE-2026-81289kimlik doğrulamasız · tıklama gerekir≤ 5.13.1

  WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-13157katılımcı+≤ 5.9.3

  MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed

  Orta 6.4

• CVE-2026-39647kimlik doğrulamasız≤ 5.11

  WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability

  Orta 5.4

• CVE-2024-30530giriş gerekir≤ 5.1

  WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-10268katılımcı+≤ 5.8

  MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Short

  Orta 5.4

• CVE-2024-5664katılımcı+≤ 5.5

  MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode

  Orta 5.4

• CVE-2026-65506kimlik doğrulamasız≤ 5.12

  WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-1219kimlik doğrulamasız≤ 5.10

  MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposur

  Orta 5.3

• CVE-2026-1249yazar+≤ 5.10

  MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery

  Orta 5.0

• CVE-2025-32235giriş gerekir≤ 5.9.4

  WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability

  Orta 4.3