Trinity Audio – Text To Speech Ai Audio Player To Convert Content Into Audio
Approved changes feed: RSS · Atom
cpe:2.3:a:sergiotrinity:trinity_audio_–_text_to_speech_ai_audio_player_to_convert_content_into_audio:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sergiotrinity (a931b117-b366-5e30-982d-cb2b3a2729bc) |
|---|---|
| Product | Trinity Audio – Text To Speech Ai Audio Player To Convert Content Into Audio (bbedda00-fbac-518a-846d-51f1544c2644) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9952 |
vulnerable | 2026-06-08 07:47:10.336968 |
Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting
MEDIUM (6.1)
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Published: 2025-10-04T03:33:30.641Z
Updated: 2026-04-08T17:13:31.893Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9886 |
vulnerable | 2026-06-08 07:47:10.173730 |
Trinity Audio <= 5.20.2 - Cross-Site Request Forgery
MEDIUM (4.3)
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin/inc/post-management.php' file. This makes it possible for unauthenticated attackers to activate/deactivate posts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2025-10-04T03:33:32.003Z
Updated: 2026-04-08T17:33:20.120Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9196 |
vulnerable | 2026-06-08 07:45:21.864655 |
Trinity Audio <= 5.21.0 - Unauthenticated Information Exposure
MEDIUM (5.3)
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on install. This makes it possible for unauthenticated attackers to extract sensitive data including configuration data.
Published: 2025-10-11T07:25:57.293Z
Updated: 2026-04-08T16:57:35.876Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.