Lucene search
K

109 matches found

Patchstack
Patchstack
added 2025/10/10 11:29 p.m.4 views

WordPress Trinity Audio plugin <= 5.21.0 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Moose Love in WordPress Plugin Trinity Audio versions = 5.21.0...

5.3CVSS6.6AI score0.00951EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-25599

Malware in sbrugna...

8.8CVSS6.5AI score0.00739EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/10/05 3:37 a.m.12 views

CVE-2025-9952

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...

6.1CVSS5.6AI score0.00251EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/05 3:37 a.m.13 views

CVE-2025-9886

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin/inc/post-management.php' file. This...

4.3CVSS5.3AI score0.0018EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/04 6:30 a.m.9 views

EUVD-2025-32406

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...

6.1CVSS5.2AI score0.00251EPSS
Exploits0References5
NVD
NVD
added 2025/10/04 4:16 a.m.19 views

CVE-2025-9886

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin/inc/post-management.php' file. This...

4.3CVSS0.0018EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/04 3:33 a.m.28 views

CVE-2025-9886 Trinity Audio <= 5.20.2 - Cross-Site Request Forgery

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin/inc/post-management.php' file. This...

4.3CVSS0.0018EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/04 3:33 a.m.3 views

CVE-2025-9886 Trinity Audio <= 5.20.2 - Cross-Site Request Forgery

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin/inc/post-management.php' file. This...

4.3CVSS5AI score0.0018EPSS
Exploits0References3
CVE
CVE
added 2025/10/04 3:33 a.m.20 views

CVE-2025-9886

CVE-2025-9886 : Trinity Audio – Text to Speech AI audio player for WordPress has a Cross-Site Request Forgery vulnerability up to version 5.20.2 caused by missing nonce validation in admin/inc/post-management.php. This allows unauthenticated attackers to activate/deactivate posts via forged reque...

4.3CVSS5AI score0.0018EPSS
Exploits0References3
CVE
CVE
added 2025/10/04 3:33 a.m.18 views

CVE-2025-9952

CVE-2025-9952 refers to a Reflected Cross-Site Scripting vulnerability in the Trinity Audio – Text to Speech AI audio player plugin for WordPress, affecting versions up to and including 5.20.2. The issue arises from insufficient input sanitization and output escaping in the range-date parameter, ...

6.1CVSS5.3AI score0.00251EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/04 3:33 a.m.19 views

CVE-2025-9952 Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...

6.1CVSS0.00251EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/04 3:33 a.m.2 views

CVE-2025-9952 Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...

6.1CVSS5.3AI score0.00251EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/04 12:0 a.m.3 views

WordPress plugin Trinity Audio 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.4AI score0.0018EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/04 12:0 a.m.7 views

PT-2025-40624

Name of the Vulnerable Software and Affected Versions Trinity Audio – Text to Speech AI audio player plugin for WordPress versions prior to 5.20.2 Description The software is susceptible to Cross-Site Request Forgery. This is because of a lack of, or incorrect, nonce validation in the...

4.3CVSS6.4AI score0.0018EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/10/04 12:0 a.m.4 views

WordPress plugin Trinity Audio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS5.9AI score0.00251EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/10/03 11:54 p.m.4 views

WordPress Trinity Audio plugin <= 5.20.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Moose Love in WordPress Plugin Trinity Audio versions = 5.20.2...

6.1CVSS6.1AI score0.00251EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/10/03 11:54 p.m.5 views

WordPress Trinity Audio plugin <= 5.20.2 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Moose Love in WordPress Plugin Trinity Audio versions = 5.20.2...

4.3CVSS6.8AI score0.0018EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-17280

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00236EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2025/08/19 2:42 p.m.2 views

trinity-rft (>=0.1.0 <=0.1.1) potentially affected by CVE-2025-50461 via verl (=0.3.0.post1)

verl PYPI version =0.3.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on verl and may be impacted: - trinity-rft =0.1.0, =0.1.1 Source cves: CVE-2025-50461 Source advisory: SNYK:PYTHON-VERL-12027893...

6.5CVSS5.8AI score0.00462EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2025/07/14 6:30 a.m.0 views

trinity (>=0.1.0a28 <=0.1.0a36) potentially affected by CVE-2025-29606 via libp2p (>=0.1.1 <=0.1.5)

libp2p PYPI version =0.1.1, =0.1.0a28, =0.1.0a36 Source cves: CVE-2025-29606 Source advisory: OSV:GHSA-X8C6-GJ59-6RX8...

4.3CVSS5.8AI score0.00311EPSS
Exploits0
Rows per page
Query Builder