CVE-2026-16776 | Sonaar MP3 Audio Player Plugin up to 5.14.2 on WordPress Shortcode shortcode cross site scripting

October 10, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Sonaar MP3 Audio Player Plugin up to 5.14.2 on WordPress. The affected element is an unknown function of the component Shortcode Handler. The manipulation of the argument shortcode leads to cross site scripting.

This vulnerability is documented as CVE-2026-16776. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More