A vulnerability classified as very critical was found in IronTemplates Croma Music Plugin up to 3.6 on WordPress. This vulnerability affects the function
ironMusic_ajax
. The manipulation leads to missing authorization.
This vulnerability was named CVE-2024-12202. The attack can be initiated remotely. There is no exploit available.