Skip to content
OpenAdvisories

Vendor

IronTemplates

2 known vulnerabilities.

Products

Croma Music 1 SoundRise Music 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-2103

    SoundRise Music <= 1.7 - Authenticated (Subscriber+) Arbitrary Options Update

    The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on theironMusic_ajax() function in all versions up to, and including, 1.6.11. This makes it pos…

    IronTemplates SoundRise Music Web / CMS
  • High 8.8
    CVE-2024-12202

    Croma Music <= 3.6 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax

    The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'ironMusic_ajax' function in all versions up to, and including, 3.6. This makes it possible …

    IronTemplates Croma Music Web / CMS