Unauthorized Arbitrary File Deletion Vulnerability in Sonaar's MP3 Audio Player

CVE-2024-7856

Summary

The MP3 Audio Player – Music Player, Podcast Player & Radio plugin by Sonaar for WordPress is susceptible to a vulnerability that permits unauthorized deletion of files. This issue arises from the absence of a proper capability check in the removeTempFiles() function and inadequate path validation for the 'file' parameter across all versions up to and including 5.7.0.1. As a result, authenticated users with a subscriber-level role or higher can exploit this vulnerability to delete critical files, including wp-config.php, potentially leading to remote code execution scenarios.

References