Skip to content
OpenAdvisories

Vendor

Audio Merchant

2 known vulnerabilities.

Products

Audio Merchant 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-6196

    Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload

    The Audio Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.4. This is due to missing or incorrect nonce validation on the function audio_merchant_add_audio_file function. This makes it possibl…

    Audio Merchant Audio Merchant Web / CMS