Read the docs

sergiotrinity

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

sergiotrinity records in CISA KEV

No sergiotrinity vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-08432 CVE-2025-9196 · GHSA-4c4v-q7vw-5qgg

Trinity Audio <= 5.21.0 - Unauthenticated Information Exposure

Priority LOW 32

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpin…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01005 Published 2025-10-11 No fix listed CWE-200
TI-2025-09133 CVE-2025-9952 · GHSA-64cp-4hp8-gjpv

Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting

Priority LOW 27

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00275 Published 2025-10-04 No fix listed CWE-79
TI-2025-41225 CVE-2025-67466 · GHSA-758v-pprx-jj23

WordPress Trinity Audio plugin <= 5.23.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.23.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0023 Published 2025-12-09 No fix listed CWE-862
TI-2025-31320 CVE-2025-49272 · GHSA-77gx-vcj4-hf9v

WordPress Trinity Audio plugin <= 5.20.0 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.20.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2025-06-06 No fix listed CWE-862
TI-2025-09071 CVE-2025-9886 · GHSA-3c49-j849-9hf2

Trinity Audio <= 5.20.2 - Cross-Site Request Forgery

Priority LOW 19

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00197 Published 2025-10-04 No fix listed CWE-352
Open these records in search →