Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/04 12:00 a.m.•5 views

CVE-2025-9886: Cross-Site Request Forgery (CSRF)

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin/inc/post-management.php' file. This...

4.3CVSS5.6AI score0.00197EPSS
SaveExploits0References2
Rows per page
Query Builder