CVE-2024-31343

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.1...

CVE-2024-31343

CVE-2024-31343 affects the MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin, with a Missing Authorization vulnerability reachable unauthenticated, allowing Arbitrary File Download from versions up to 4.10.1 (affected range: n/a through 4.10.1). Root cause per the connected d...

CVE-2024-31343 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.1...

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions = 4.10.1...

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar Plugin <= 4.10.1 is vulnerable to Arbitrary File Download

Software MP3 Audio Player for Music, Radio & Podcast by Sonaar Type Plugin Vulnerable versions = 4.10.1 Fixed in 5.0 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Download CVE CVE-2024-31343 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 5a45ce0f048b...

MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.1.1 - Missing Authorization

Description The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 5.1. This makes it possible for authenticated attackers, with subscriber-level acce...

MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-30530

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1...

CVE-2024-30530 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1...

CVE-2024-30530

Technical details about CVE-2024-30530 are not provided in the supplied documents. The initial description states a Stored XSS in Sonaar MP3 Player plugin but no product/version/root-cause/impact/fix details are present here. Monitor for updates.

WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin MP3 Audio Player for Music, Radio &...

CVE-2024-30487 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1...

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar Plugin <= 5.1 is vulnerable to Cross Site Scripting (XSS)

Software MP3 Audio Player for Music, Radio & Podcast by Sonaar Type Plugin Vulnerable versions = 5.1 Fixed in 5.1.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30530 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8394c45740de Credits...

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar Plugin <= 5.1 is vulnerable to Broken Access Control

Software MP3 Audio Player for Music, Radio & Podcast by Sonaar Type Plugin Vulnerable versions = 5.1 Fixed in 5.1.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30487 Patch priority High CVSS severity High 7.6 Developer Claim ownership PSID 3890d24d42c5...

MP3 Audio Player for Music, Radio & Podcast by Sonaar < 4.10.1 - Missing Authorization to Template Import

Description The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the importsrmp3template function in all versions up to, and including, 4.10. This makes it possible for authenticated...

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar Plugin <= 4.10 is vulnerable to Broken Access Control

Software MP3 Audio Player for Music, Radio & Podcast by Sonaar Type Plugin Vulnerable versions = 4.10 Fixed in 4.10.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47822 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8b88ee16e64b...

CVE-2023-37734

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

Buffer overflow

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

CVE-2023-37734

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

EZ SoftMagic MP3 Audio Converter Security Vulnerability

EZ SoftMagic MP3 Audio Converter is an MP3 audio editor from EZ SoftMagic. A security vulnerability exists in EZ SoftMagic MP3 Audio Converter version 2.7.3.700, which originated from a vulnerability that could allow an attacker to execute arbitrary code or crash the application by overflowing th...