CVE-2026-1249 | MP3 Audio Player Plugin up to 5.3/5.10 on WordPress load_lyrics_ajax_callback server-side request forgery

A vulnerability identified as critical has been detected in MP3 Audio Player Plugin up to 5.3/5.10 on WordPress. This affects the function load_lyrics_ajax_callback. This manipulation causes server-side request forgery.

This vulnerability is handled as CVE-2026-1249. The attack can be initiated remotely. There is not any exploit available.