CVE-2025-2103
published 2025-03-14CVE-2025-2103: The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability…
PriorityP260high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.34%
25.3th percentile
The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on theironMusic_ajax() function in all versions up to, and including, 1.6.11. This makes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| haxtheweb | haxcms-nodejs | >= 0 < 11.0.3 | 11.0.3 |
| irontemplates | soundrise | < 1.7.1 | 1.7.1 |
| irontemplates | soundrise_music | <= 1.6.11 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
HaxCMS-PHP Command Injection Vulnerability
ghsa·2025-06-09
CVE-2025-49141 [HIGH] CWE-78 HaxCMS-PHP Command Injection Vulnerability
HaxCMS-PHP Command Injection Vulnerability
### Summary
The 'gitImportSite' functionality obtains a URL string from a POST request and insufficiently validates user input. The ’set_remote’ function later passes this input into ’proc_open’, yielding OS command injection.
### Details
The vulnerability exists in the logic of the ’gitImportSite’ function, located in ’Operations.php’. The current implementation only relies on the ’filter_var’ and 'strpos' functions to validate the URL, which is not sufficient to ensure absence of all Bash special characters used for command injection.
#### Affected Resources
• Operations.php:2103 gitImportSite()
• \/\/system/api/gitImportSite
### PoC
To replicate this vulnerability, authenticate and send a POST request to the 'gitImportSite' endpoint with
GHSA
GHSA-ffw4-m2vq-ff8p: The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing cap
ghsa_unreviewed·2025-03-14
CVE-2025-2103 [HIGH] CWE-862 GHSA-ffw4-m2vq-ff8p: The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing cap
The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on theironMusic_ajax() function in all versions up to, and including, 1.6.11. This makes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
No detection rules found.
No public exploits indexed.
2025-03-14
Published