Sonaar Mp3 Audio Player For Music, Radio & Podcast — known CVE vulnerabilities

Every CVE whose affected-product data names Sonaar Mp3 Audio Player For Music, Radio & Podcast, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2024-7856 — CVSS 8.1 (high): The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to unauthorized arbitrary file…
• CVE-2024-30487 — CVSS 7.6 (high): Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio…
• CVE-2024-31343 — CVSS 7.5 (high): Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio…
• CVE-2024-30530 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for…
• CVE-2024-10268 — CVSS 6.4 (medium): The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
• CVE-2024-5664 — CVSS 6.4 (medium): The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
• CVE-2024-56266 — CVSS 6.3 (medium): Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows…
• CVE-2023-47822 — CVSS 5.4 (medium): Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly…
• CVE-2021-24624 — CVSS 4.8 (medium): The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some…