Vendor
sergiotrinity
5 known vulnerabilities.
Products
5 results · Clear filters · Feed
-
Medium 4.3
WordPress Trinity Audio plugin <= 5.23.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.23.3.
-
Medium 5.3CVE-2025-9196 Public exploit
Trinity Audio <= 5.21.0 - Unauthenticated Information Exposure
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on instal…
-
Medium 4.3CVE-2025-9886 Public exploit
Trinity Audio <= 5.20.2 - Cross-Site Request Forgery
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin…
-
Medium 6.1
Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitiz…
-
Medium 4.3
WordPress Trinity Audio plugin <= 5.20.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.20.0.