CVE-2024-56266
Published Jan 2, 2025Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Accessing Functionality Not Properly Constrai…
Vendor archive
sonaar CVEs
Beta · best-effort9 CVEs tagged to vendor sonaar — 0 Critical, 3 High, 6 Medium, 0 Low, 0 Unrated.
CVE-2023-47822
Published Dec 9, 2024Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.T…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-10268
Published Nov 19, 2024The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaar_audioplayer shortco…
CVE-2024-7856
Published Aug 29, 2024The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-5664
Published Jul 10, 2024The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute within the plugin's…
CVE-2024-31343
Published Apr 10, 2024Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar:…
CVE-2024-30530
Published Mar 31, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Sto…
CVE-2024-30487
Published Mar 29, 2024Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar:…
CVE-2021-24624
Published Nov 1, 2021The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist settings, allowing high p…
Showing 1-9 of 9 CVEsPage 1 of 1