https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-56266.htmlhttps://patchthecve.com/cve/CVE-2024-56266.htmlWed, 17 Jun 2026 08:11:57 +0000MEDIUM 6.3: Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through <= 5.8.https://patchthecve.com/cve/CVE-2023-47822.htmlhttps://patchthecve.com/cve/CVE-2023-47822.htmlWed, 17 Jun 2026 06:33:21 +0000MEDIUM 5.4: Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.https://patchthecve.com/cve/CVE-2024-10268.htmlhttps://patchthecve.com/cve/CVE-2024-10268.htmlWed, 17 Jun 2026 06:55:17 +0000MEDIUM 6.4: The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaar_audioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input sanitization and output escaping on user supplied https://patchthecve.com/cve/CVE-2024-7856.htmlhttps://patchthecve.com/cve/CVE-2024-7856.htmlWed, 17 Jun 2026 08:21:03 +0000HIGH 8.1: The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the removeTempFiles() function and insufficient path validation on the 'file' parameter in all versions up to, and inchttps://patchthecve.com/cve/CVE-2024-5664.htmlhttps://patchthecve.com/cve/CVE-2024-5664.htmlWed, 17 Jun 2026 08:16:23 +0000MEDIUM 6.4: The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute within the plugin's sonaar_audioplayer shortcode in all versions up to, and including, 5.5 due to insufficient input sanitization and output https://patchthecve.com/cve/CVE-2024-31343.htmlhttps://patchthecve.com/cve/CVE-2024-31343.htmlWed, 17 Jun 2026 07:28:15 +0000HIGH 7.5: Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.1.https://patchthecve.com/cve/CVE-2024-30530.htmlhttps://patchthecve.com/cve/CVE-2024-30530.htmlWed, 17 Jun 2026 07:27:08 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1.https://patchthecve.com/cve/CVE-2024-30487.htmlhttps://patchthecve.com/cve/CVE-2024-30487.htmlWed, 17 Jun 2026 07:27:03 +0000HIGH 7.6: Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1.