WordPress plugin
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 19 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium16
- Low0
All MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤5.13.1Update to 5.14 | CVE-2026-81289 | |
| High7.2 | Unauthenticated Server-Side Request Forgery ≤5.11Update to 5.12 | CVE-2026-39647 | |
| High8.1 | Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion ≤5.7.0.1Update to 5.7.1 | CVE-2024-7856 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.13.1Update to 5.14
- High7.2Unauthenticated Server-Side Request Forgery
≤5.11Update to 5.12
- High8.1Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
≤5.7.0.1Update to 5.7.1
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar: common questions
Does MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar have known vulnerabilities?
Yes. VulnCrest Radar lists 19 known vulnerabilities in MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar: 3 high, 16 medium. None are known to affect version null.
How do I check which version of MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar vulnerability?
CVE-2026-111967, published Oct 28, 2026: MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.9 - 5.15 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar vulnerability listed in CISA KEV?
No. None of the known MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar vulnerabilities is currently listed in the CISA KEV catalog.