Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: sergiotrinity Clear all filters
TI-2025-41225 CVE-2025-67466 · GHSA-758v-pprx-jj23

WordPress Trinity Audio plugin <= 5.23.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.23.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0023 Published 2025-12-09 No fix listed CWE-862
TI-2025-08432 CVE-2025-9196 · GHSA-4c4v-q7vw-5qgg

Trinity Audio <= 5.21.0 - Unauthenticated Information Exposure

Priority LOW 32

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpin…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01005 Published 2025-10-11 No fix listed CWE-200
TI-2025-09071 CVE-2025-9886 · GHSA-3c49-j849-9hf2

Trinity Audio <= 5.20.2 - Cross-Site Request Forgery

Priority LOW 19

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00197 Published 2025-10-04 No fix listed CWE-352
TI-2025-09133 CVE-2025-9952 · GHSA-64cp-4hp8-gjpv

Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting

Priority LOW 27

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00275 Published 2025-10-04 No fix listed CWE-79
TI-2025-31320 CVE-2025-49272 · GHSA-77gx-vcj4-hf9v

WordPress Trinity Audio plugin <= 5.20.0 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.20.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2025-06-06 No fix listed CWE-862