AudioIgniter Music Player

AudioIgniter Music Player has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (100%).

The one issue recorded for AudioIgniter Music Player has a vendor fix available, so running the current release closes it.

All of these findings were reported by nudien udin. AudioIgniter Music Player is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
7.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all AudioIgniter Music Player vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2026-8679

AudioIgniter Music Player <= 2.0.2 - Unauthenticated Insecure Direct Object Reference to 'audioigniter_playlist_id' Parameter

Read the full analysis

Vulnerability Records

1 records
AudioIgniter Music Player banner
Latestv2.0.4

AudioIgniter Music Player

The CSSIgniter Team

Author

The CSSIgniter Team

4.6(64)
92/100
Last Updated
2026-05-27 (3mo ago)
Active Installs
10,000+
Downloads
284,840
Requires WP
6.0+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2016-08-29 (10y ago)

Looking for an MP3 music player? AudioIgniter lets you create music playlists and embed them in your WordPress posts, pages or custom post types. By using the standard WordPress media upload functionality, you can create new audio playlists in minutes. Oh, you can use AudioIgniter to stream your radio show too! Check out the demo now! Selling digital music? You can combine AudioIgniter with WooCommerce to easily sell individual tracks. Features: Supports audio and radio streaming Unlimited playlists Unlimited tracks 100% Compatible with Elementor 100% Compatible with Visual Composer 100% Compatible with Gutenberg Block Editor Responsive layout Embed through shortcode Flexible settings per playlist Show/Hide track listing Show/Hide track numbers in tracklist Show numbers in reverse order Show/Hide track covers in playlist Show/Hide active track’s cover Show/Hide artist name Custom “Buy track” URL field Custom “Download” URL field “Full” or “Simple” player mode (Great for podcasts) Limit track listing height Repeat track listing option Maximum player width Automatic ID3 Tag extraction from MP3 files Heavily tested on the 150 most popular free themes on WordPress.org Supported Services: Acast Amazon S3 Anchor Art19 AudioBoom Castbox Captivate Icecast Podbean Radiojar Shoutcast Speaker Stitcher Libsyn But wait, there’s more! A Pro version is also available! Here’s what you get if you decide to upgrade: Bulk upload functionality Rearrange tracks functionality Stop Tracks From Other Players (Multiple Players In One Page) Track skipping functionality (You can adjust the number of seconds) Playback rate (1x, 1.5x, 2x) Lyrics per track Individual Track Repeat Mode Non-continuous playback (Stop each track after playing) Optional customizable delay between tracks Shuffle playlist mode Starting track option Default track timer to countdown mode Fixed position player (Continuous play must be supported by your theme) Internal taxonomy for archiving purposes Customize the colors through the Customizer Custom block for the Gutenberg Block Editor (With the ability to change colors per player) Widget & Shortcode available Streaming service button links Sync download URL with audio URL automatically Standalone shortcode for single tracks (without the need to create a playlist) Remember last played track and position Per-playlist and per-track analytics PREMIUM SUPPORT You can expect the same level of support for both the free and pro version of our plugin. Average response time: 24 hours. JOIN OUR COMMUNITY Join our Facebook group to discuss new features and stay up to date on our latest releases. Contribute Visit the GitHub repository for full source code and to report any bugs.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C