sonaar vulnerabilities
14 published CVEs name sonaar among the affected products.
- Published CVEs
- 14
- Last 12 months
- 8
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 12Low 0Not scored 0
CVEs per yearBy the year they were published
- 20243
- 20253
- 20268
Newest CVEs
- CVE-2026-16776
MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
sonaar · MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
Medium6.4 - CVE-2026-104673
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability
Sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
Medium6.5 - CVE-2026-81289
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability
sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
High7.1 - CVE-2026-65506
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability
sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
Medium5.3 - CVE-2023-54351
WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments
Sonaar · Sonaar Music Plugin
Medium5.1 - CVE-2026-39647
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability
sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
Medium5.4 - CVE-2026-1219
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure
sonaar · MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
Medium5.3 - CVE-2026-1249
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery
sonaar · MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
Medium5.0 - CVE-2025-32235
WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability
sonaar · MP3 Audio Player for Music, Radio & Podcast by Sonaar
Medium4.3 - CVE-2024-13157
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed
sonaar · MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
Medium6.4