sonaar vulnerabilities
14 published CVEs name sonaar among the affected products.
- 14Published CVEs14 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-16776
MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
sonaar · MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
Medium6.4 - CVE-2026-104673
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability
Sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
Medium6.5 - CVE-2026-81289
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability
sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
High7.1 - CVE-2026-65506
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability
sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
Medium5.3 - CVE-2023-54351
WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments
Sonaar · Sonaar Music Plugin
Medium5.1 - CVE-2026-39647
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability
sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
Medium5.4 - CVE-2026-1219
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure
sonaar · MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
Medium5.3 - CVE-2026-1249
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery
sonaar · MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
Medium5.0 - CVE-2025-32235
WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability
sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
Medium4.3 - CVE-2024-13157
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed
sonaar · MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
Medium6.4