Audiomack

Audiomack has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Audiomack has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Jarno Vos (jarnovos). Audiomack is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.8.15.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Audiomack vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-49357

Audiomack <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-12-31 00:00	Audiomack <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Audiomack <= 1.4.8	`CVE-2025-49357`	6.4 Medium	Jarno Vos (jarnovos)	No

Showing 1–1 of 1 reports

Latestv1.4.8

Audiomack

Author

audiomack

4.0(3)

80/100

Last Updated

2021-07-13 (5y ago)

Active Installs

100+

Downloads

27,016

Requires WP

3.0.0+

Requires PHP

Tested up to

WP 5.8.15

Created

2013-08-29 (13y ago)

Audiomack is the place for artists to effortlessly share their music and for fans to discover and download free songs and albums. With this plugin all you need to do is click on the sound icon in edit page/post screen and then paste the web link to a song or album. This plugin will generate the necessary embed codes. Demo Author For more information visit Audiomack.com

View on WordPress.org