TI-2025-01840 CVE-2025-2103 · GHSA-ffw4-m2vq-ff8pSoundRise Music <= 1.7 - Authenticated (Subscriber+) Arbitrary Options UpdatePriority MEDIUM 40The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on theironMusic_ajax() function in all versions up to, a…CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2025-03-14 · No fix listed CWE-862