SecAlerts
s

sonaar

Security Risk Profile

46
/100
medium

Security Risk Score

Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 1, 2021 to present

17
Total CVEs
8
Critical+High
0
Exploited
3
Unpatched

Threat Assessment

Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
46/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
0
High
8
Medium
9
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
6

Age Distribution

Common Weaknesses (CWE)

1
XSS
7
2
SSRF
2

Most Affected Products

1. Sonaar Mp3 Audio Player For Music\, Radio \& Podcast Wordpress9
2. Sonaar MP3 Audio Player for Music, Radio & Podcast7
3. WordPress MP3 Audio Player for Music, Radio & Podcast3
4. Sonaar Sonaar WordPress Theme2
5. Sonaar WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar1

Recent Vulnerabilities

See more →
CVE-2026-81289
CVSS 7.1high

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability

Sep 2, 2026🔧 No Patch
CVE-2026-65506
CVSS 5.3medium

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability

Jul 23, 2026🔧 No Patch
CVE-2025-59563
CVSS 8.8high

WordPress Sonaar theme <= 4.27.4 - Privilege Escalation vulnerability

Jun 17, 2026🔧 No Patch
CVE-2025-59560
CVSS 7.1high

WordPress Sonaar theme <= 4.27.4 - Cross Site Scripting (XSS) vulnerability

Jun 17, 2026🔧 No Patch
CVE-2023-54351
CVSS 5.1medium

WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments

Jun 8, 2026🔧 No Patch
CVE-2026-39647
CVSS 5.4medium

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability

Apr 8, 2026🔧 No Patch
CVE-2026-1249
CVSS 5.0medium

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery

Feb 14, 2026🔧 No Patch
CVE-2025-32235
CVSS 4.3EPSS 0%medium

WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability

Apr 4, 2025🔧 No Patch
CVE-2024-56266
CVSS 8.8high

WordPress MP3 Audio Player plugin <= 5.8 - Broken Access Control vulnerability

Jan 2, 2025
CVE-2023-47822
CVSS 8.8high

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability

Dec 9, 2024

Monitor sonaar in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

sonaar Security Vulnerabilities & Risk Score | 17 CVEs | SecAlerts - SecAlerts