Skip to content
OpenAdvisories

Vendor

sergiotrinity

5 known vulnerabilities.

5 results · Clear filters · Feed

  • Medium 4.3

    WordPress Trinity Audio plugin <= 5.23.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.23.3.

  • Medium 5.3
    CVE-2025-9196 Public exploit

    Trinity Audio <= 5.21.0 - Unauthenticated Information Exposure

    The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on instal…

  • Medium 4.3
    CVE-2025-9886 Public exploit

    Trinity Audio <= 5.20.2 - Cross-Site Request Forgery

    The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin…

  • Medium 6.1

    Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting

    The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitiz…

  • Medium 4.3

    WordPress Trinity Audio plugin <= 5.20.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.20.0.