Vulnerabilities > Irontemplates

DATE CVE VULNERABILITY TITLE RISK
2025-03-14 CVE-2025-2103 Missing Authorization vulnerability in Irontemplates Soundrise
The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on theironMusic_ajax() function in all versions up to, and including, 1.6.11.
network
low complexity
irontemplates CWE-862
8.8