CyberSecBulletin

IronTemplates vulnerabilities

We track 2 vulnerabilities in IronTemplates products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 14, 2025.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest IronTemplates vulnerabilities

  • 8.8 High severity

    SoundRise Music: Missing Authorization

    CVE-2025-2103IronTemplates

    The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on theironMusic_ajax() function in all versions up to, and including, 1.6.11. This makes it poss

  • 8.8 High severity

    Croma Music: Missing Authorization

    CVE-2024-12202IronTemplates

    The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'ironMusic_ajax' function in all versions up to, and including, 3.6. This makes it possible f