MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar: Code execution
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar is affected by code execution. Exploitation requires at least subscriber-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
- Component
- MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
- Plugin slug
mp3-music-player-by-sonaar- Affected
- See vendor advisory
- Safe version
- See mitigation notes
- Published
- Aug 29, 2024
- Weakness
- CWE-862 — Missing Authorization
This CVE was published Aug 29, 2024 and is one of 11 known issues for this plugin.
Patch or disable the affected component.
Update MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar to a release outside the affected range, or disable and remove it until a fixed version is available.
Technical description
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the removeTempFiles() function and insufficient path validation on the 'file' parameter in all versions up to, and including, 5.7.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files which can make remote code execution possible when wp-config.php is deleted.
CVE / CNA vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
NVD vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H