Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: IronTemplates Clear all filters
TI-2025-01840 CVE-2025-2103 · GHSA-ffw4-m2vq-ff8p

SoundRise Music <= 1.7 - Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 40

The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on theironMusic_ajax() function in all versions up to, a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00362 Published 2025-03-14 No fix listed CWE-862
TI-2024-11317 CVE-2024-12202 · GHSA-xwwq-24cw-rm4r

Croma Music <= 3.6 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax

Priority MEDIUM 41

The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'ironMusic_ajax' function in all versions up to, and…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00549 Published 2025-01-07 No fix listed CWE-862