CVE-2023-47822
- EPSS 0.27%
- Veröffentlicht 09.12.2024 13:15:31
- Zuletzt bearbeitet 22.01.2025 18:21:20
Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar...
CVE-2024-10268
- EPSS 0.36%
- Veröffentlicht 19.11.2024 08:15:15
- Zuletzt bearbeitet 17.01.2025 14:57:54
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sonaar_audioplayer shortcode in all versions up to, and including, 5.8 due to insufficient input ...
CVE-2024-31343
- EPSS 1.15%
- Veröffentlicht 10.04.2024 17:15:55
- Zuletzt bearbeitet 17.01.2025 19:32:04
Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.1.
CVE-2024-30530
- EPSS 0.08%
- Veröffentlicht 31.03.2024 20:15:08
- Zuletzt bearbeitet 31.01.2025 19:59:22
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast ...
CVE-2024-30487
- EPSS 0.22%
- Veröffentlicht 29.03.2024 14:15:10
- Zuletzt bearbeitet 31.01.2025 19:41:37
Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1.
CVE-2021-24624
- EPSS 0.23%
- Veröffentlicht 01.11.2021 09:15:08
- Zuletzt bearbeitet 21.11.2024 05:53:26
The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist settings, allowing high privilege users to perform Cross-Site Scripting attacks