VYPR

Sonaar Music Plugin

by WordPress

CVEs (1)

  • CVE-2023-54351HigJun 8, 2026
    risk 0.47cvss 7.2epss

    WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp-comments-post.php…