WordPress plugin MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar has a security vulnerability.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

CVE-2025-7049

CVE-2025-7049 affects the WordPress plugin WPGYM - Wordpress Gym Management System up to version 67.7.0 . The vulnerability is a Privilege Escalation via a missing validation on a user-controlled key in the function MJ_gmgt_gmgt_add_user , allowing authenticated users with Subscriber+ privileges ...