SONAAR MUSIC vulnerabilities
Published CVEs affecting SONAAR MUSIC products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-59563
High · 8.8
CWE-266 Jun 17, 2026
WordPress Sonaar theme <= 4.27.4 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions.
CVE-2025-59560
High · 7.1
CWE-79 Jun 17, 2026
WordPress Sonaar theme <= 4.27.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Sonaar <= 4.27.4 versions.