MP3 Audio Player for Music, Radio & Podcast by Sonaar

sonaar

Developer

5.11

Latest version

20,000

Installations

No date

Last updated

WordPress Plugin

No VDP

Claim ownership

Report vulnerability

Vulnerabilities

Security Contributors

Vulnerability history

0 present

13 patched

5 Mitigation rules

Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure vulnerability
4.0-5.10
19/02/2026
Authenticated (Author+) Server-Side Request Forgery vulnerability
5.3-5.10
13/02/2026
Broken Access Control vulnerability
<= 5.9.4
04/04/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via Podcast RSS Feed vulnerability
<= 5.9.3
31/01/2025
Broken Access Control vulnerability
<= 5.8
30/12/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode vulnerability
<= 5.8
18/11/2024
Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
<= 5.7.0.1
29/08/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via sonaar_audioplayer Shortcode vulnerability
<= 5.5
10/07/2024
Arbitrary File Download vulnerability
<= 4.10.1
05/04/2024
Cross Site Scripting (XSS) vulnerability
<= 5.1
29/03/2024
Broken Access Control vulnerability
<= 5.1
28/03/2024
Broken Access Control vulnerability
<= 4.10
15/11/2023
Multiple Cross-Site Scripting (XSS) vulnerabilities
<= 2.4.1
04/10/2021