SecAlerts
s

sonaar

Security Risk Profile

43
/100
medium

Security Risk Score

Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 1, 2021 to present

20
Total CVEs
8
Critical+High
0
Exploited
3
Unpatched

Threat Assessment

Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
43/100
medium
🆕 1Fresh (<7d)📈 3 in Last 30 Days

Severity Distribution

Critical
0
High
8
Medium
11
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
6

Age Distribution

Common Weaknesses (CWE)

1
XSS
10
2
SSRF
2

Most Affected Products

1. Sonaar Mp3 Audio Player For Music\, Radio \& Podcast Wordpress9
2. Sonaar MP3 Audio Player for Music, Radio & Podcast7
3. WordPress MP3 Audio Player for Music, Radio & Podcast3
4. Sonaar MP3 Audio Player – Music Player, Podcast Player & Radio2
5. Sonaar Sonaar WordPress Theme2

Recent Vulnerabilities

See more →
CVE-2026-111967
unknown

MP3 Audio Player by Sonaar 5.9 - 5.15 - Contributor+ Stored XSS via Shortcode Attribute

Oct 28, 2026🔧 No Patch
CVE-2026-16776
CVSS 6.4medium

MP3 Audio Player <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

Oct 10, 2026🔧 No Patch
CVE-2026-104673
CVSS 6.5medium

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability

Oct 5, 2026🔧 No Patch
CVE-2026-81289
CVSS 7.1high

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability

Sep 2, 2026🔧 No Patch
CVE-2026-65506
CVSS 5.3medium

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability

Jul 23, 2026🔧 No Patch
CVE-2025-59563
CVSS 8.8high

WordPress Sonaar theme <= 4.27.4 - Privilege Escalation vulnerability

Jun 17, 2026🔧 No Patch
CVE-2025-59560
CVSS 7.1high

WordPress Sonaar theme <= 4.27.4 - Cross Site Scripting (XSS) vulnerability

Jun 17, 2026🔧 No Patch
CVE-2023-54351
CVSS 5.1medium

WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments

Jun 8, 2026🔧 No Patch
CVE-2026-39647
CVSS 5.4medium

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability

Apr 8, 2026🔧 No Patch
CVE-2026-1249
CVSS 5.0medium

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery

Feb 14, 2026🔧 No Patch

Monitor sonaar in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

sonaar Security Vulnerabilities & Risk Score | 20 CVEs | SecAlerts - SecAlerts