AudioIgniter Music Player
AudioIgniter Music Player has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (100%).
The one issue recorded for AudioIgniter Music Player has a vendor fix available, so running the current release closes it.
All of these findings were reported by nudien udin. AudioIgniter Music Player is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-8679AudioIgniter Music Player <= 2.0.2 - Unauthenticated Insecure Direct Object Reference to 'audioigniter_playlist_id' Parameter
Read the full analysisVulnerability Records

AudioIgniter Music Player
Author
The CSSIgniter Team
Looking for an MP3 music player? AudioIgniter lets you create music playlists and embed them in your WordPress posts, pages or custom post types. By using the standard WordPress media upload functionality, you can create new audio playlists in minutes. Oh, you can use AudioIgniter to stream your radio show too! Check out the demo now! Selling digital music? You can combine AudioIgniter with WooCommerce to easily sell individual tracks. Features: Supports audio and radio streaming Unlimited playlists Unlimited tracks 100% Compatible with Elementor 100% Compatible with Visual Composer 100% Compatible with Gutenberg Block Editor Responsive layout Embed through shortcode Flexible settings per playlist Show/Hide track listing Show/Hide track numbers in tracklist Show numbers in reverse order Show/Hide track covers in playlist Show/Hide active track’s cover Show/Hide artist name Custom “Buy track” URL field Custom “Download” URL field “Full” or “Simple” player mode (Great for podcasts) Limit track listing height Repeat track listing option Maximum player width Automatic ID3 Tag extraction from MP3 files Heavily tested on the 150 most popular free themes on WordPress.org Supported Services: Acast Amazon S3 Anchor Art19 AudioBoom Castbox Captivate Icecast Podbean Radiojar Shoutcast Speaker Stitcher Libsyn But wait, there’s more! A Pro version is also available! Here’s what you get if you decide to upgrade: Bulk upload functionality Rearrange tracks functionality Stop Tracks From Other Players (Multiple Players In One Page) Track skipping functionality (You can adjust the number of seconds) Playback rate (1x, 1.5x, 2x) Lyrics per track Individual Track Repeat Mode Non-continuous playback (Stop each track after playing) Optional customizable delay between tracks Shuffle playlist mode Starting track option Default track timer to countdown mode Fixed position player (Continuous play must be supported by your theme) Internal taxonomy for archiving purposes Customize the colors through the Customizer Custom block for the Gutenberg Block Editor (With the ability to change colors per player) Widget & Shortcode available Streaming service button links Sync download URL with audio URL automatically Standalone shortcode for single tracks (without the need to create a playlist) Remember last played track and position Per-playlist and per-track analytics PREMIUM SUPPORT You can expect the same level of support for both the free and pro version of our plugin. Average response time: 24 hours. JOIN OUR COMMUNITY Join our Facebook group to discuss new features and stay up to date on our latest releases. Contribute Visit the GitHub repository for full source code and to report any bugs.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C