CVE-2025-2103

Summary

CVE-2025-2103 is a vulnerability affecting the SoundRise Music plugin for WordPress. The issue lies in the lack of capability checks on the onMusic_ajax() function, which is present in all versions up to 1.6.11. This vulnerability allows authenticated attackers, who have subscriber-level access or higher, to modify arbitrary options. The consequences of this vulnerability can be severe, enabling attackers to update the default role for registration to administrator and allow unauthorized user registration, ultimately granting them administrative access to the vulnerable site.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.