← WordPress Vulnerabilities
WordPress security by component

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 14, 2026; the highest CVE/CNA score is 5.

Plugin slug: mp3-audio-player-music-player-podcast-player-radio-by-sonaar

CVE-2026-1249: MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar: Server-side request forgery

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar is affected by server-side request forgery. Exploitation requires at least author-level access. The vulnerable server can be induced to make attacker-selected network requests.

PublishedFeb 14, 2026
Safe version guidanceSee mitigation notes
Safe version
Feb 14, 2026 CVE-2026-1249
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar: Server-side request forgery
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar is affected by server-side request forgery. Exploitation requires at least author-level access. The vulnerable server can be induced to make attacker-selected network requests.
See mitigation notes
CVE5.0
NVDPending