Audio Merchant vulnerabilities
We track 1 vulnerability in Audio Merchant products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 20, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Audio Merchant vulnerabilities
- 8.8 High severity
Audio Merchant: Cross-Site Request Forgery
The Audio Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.4. This is due to missing or incorrect nonce validation on the function audio_merchant_add_audio_file function. This makes it possible