Known Vulnerabilities for FLB-Music-Player by FLB-Music
Listed below are 6 of the newest known vulnerabilities associated with "FLB-Music-Player" by "FLB-Music".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104673 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar MP3 Audio Player... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-101036 json | A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of ... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-93624 json | Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-81289 json | Unauthenticated Cross Site Scripting (XSS) in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.13.1 versions. | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-78283 json | Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions. | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-16776 json | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Si... | Not Provided | 2026-10-10 | 2026-10-11 |