Now officially on WordPress.org

CVE Database / CVE-2024-30530

CVE · Medium

CVE-2024-30530 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.1.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-30530 MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.1.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 5.4 < 5.1.1 5.1.1 2024-03-29 —

CVE-2024-30530

The MP3 Audio Player by Sonaar plugin versions before 5.1.1 contain a cross-site scripting vulnerability that could allow attackers to execute malicious scripts on affected websites. An attacker could exploit this flaw to inject harmful code such as redirects, advertisements, or other HTML content that executes when site visitors load the page. The vulnerability was discovered by Steven Julian and has been patched in version 5.1.1, which users should upgrade to immediately.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings