← WordPress Vulnerabilities
WordPress security by component

Croma Music

Croma Music is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 07, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: croma-music

CVE-2024-12202: Croma Music: Privilege escalation or authentication bypass

Croma Music is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.

PublishedJan 07, 2025
Safe version guidanceSee mitigation notes
Safe version
Jan 07, 2025 CVE-2024-12202
Croma Music: Privilege escalation or authentication bypass
Croma Music is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE8.8
NVDPending