A vulnerability classified as very critical was found in IronTemplates Croma Music Plugin up to 3.6 on WordPress. This vulnerability affects the function ironMusic_ajax. The manipulation leads to missing authorization.

This vulnerability was named CVE-2024-12202. The attack can be initiated remotely. There is no exploit available.