CVE Database /
CVE-2026-8679
CVE · High
CVE-2026-8679 — AudioIgniter Music Player [audioigniter] < 2.0.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-8679
|
AudioIgniter Music Player [audioigniter] < 2.0.3 |
Authorization Bypass Through User-Controlled Key |
High
7.5
|
< 2.0.3
|
2.0.3 |
2026-05-21 |
—
|
CVE-2026-8679
The AudioIgniter plugin for WordPress contains a security flaw that allows unauthorized access to sensitive data. In versions up to 2.0.2, the handle_playlist_endpoint function fails to verify user permissions when retrieving playlist track information, making it accessible even to unauthenticated users. This oversight enables attackers to view metadata from any playlist on the site, regardless of its status or visibility settings.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings