PLUGIN SECURITY
Is Mp3 Music Player By Sonaar safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Mp3 Music Player By Sonaar WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
mp3-music-player-by-sonaar - Requires PHP: 5.6+
- Max supported PHP (analyzed): <8.0
Known vulnerabilities
- CVE-2021-24624 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 2.4.2 (XSS) · Medium
- CVE-2023-47822 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 4.10.1 (Missing Authorization) · Medium
- CVE-2024-30487 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.1.1 (Missing Authorization) · High
- CVE-2024-30530 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.1.1 (XSS) · Medium
- CVE-2024-31343 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.0 (Missing Authorization) · High
+ 9 more known vulnerabilities
- CVE-2024-5664 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.6 (XSS) · Medium
- CVE-2024-7856 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.7.1 (Missing Authorization) · High
- CVE-2024-10268 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.9 (XSS) · Medium
- CVE-2024-56266 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.9 (Missing Authorization) · Medium
- CVE-2024-13157 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.9.4 (XSS) · Medium
- CVE-2025-32235 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.9.5 (Missing Authorization) · Medium
- CVE-2026-39647 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.12 · Medium
- CVE-2026-1219 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.11
- CVE-2026-1249 — MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.11
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Compact WP Audio Player — 20000+ active installs — max PHP 8.4
- AudioIgniter Music Player — 10000+ active installs — max PHP 8.4
- HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player — 10000+ active installs — max PHP 8.4
- Music Player for Elementor – Audio Player & Podcast Player — 10000+ active installs
- Cue by AudioTheme.com — 6000+ active installs — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.