Advisories · Technology
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar.
Every CVE that names MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
- MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure
- MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
- Broken access control
- CVSS 5.0 Medium
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery
- MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed
- MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
- MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
- Cross-site scripting (XSS)
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.7.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
- MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
- Broken access control
- CVSS 6.4 Medium
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode
- MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
- Cross-site scripting (XSS)