Trinity-Audio-CVE-Report

Disclosure for CVE-2025-9196

CVE-2025-9196 - Vulnerability in Trinity Audio

This repository discloses a vulnerability discovered in Trinity Audio <= 5.20.1,WordPress plugin developed by sergiotrinity.

🛠 Affected Version

• Product: Trinity Audio
• Version: v5.20.1
• URL: https://wordpress.org/plugins/trinity-audio/

---

🔒 Assigned CVE

---

🧾 Detailed a Description

CVE-2025-9196 — Authenticated phpinfo() Information Disclosure

• Affected Component: phpinfo()
• Attack Vector: Unauthenticated phpinfo() exposure
• Trigger: An unauthenticated requester performs an HTTP GET to /phpinfo.php and receives the full phpinfo() output.
• Impact: phpinfo() disclosure reveals PHP configuration, loaded extensions, and full server paths.It may expose environment variables, database credentials, and API keys if present.Attackers gain high-quality reconnaissance for targeted exploits and privilege escalation.Confidentiality is broken and the overall attack surface is significantly increased.
• PoC:

1. An unauthorized user accesses admin/inc/phpinfo.php
2. phpinfo() is executed.

❓Reason for the vulnerability

phpinfo.php lacks authentication/authorization checks (e.g., current_user_can), allowing unauthenticated users to view the phpinfo() output.

Proposed Fix:

Restrict access to administrators only using current_user_can

ひとこと

phpinfo()が残っているというのはとても単純であるため、ツールなどでとっくに発見されていると思ったが、そんなことは無かった。 これを期に「意外と簡単なバグが残ってるな～」と思い始め、本格的にWordPress Pluginの脆弱性調査を始めた。

🔍 Discoverer

Name: MooseLove
Role: Independent security researcher / bug hunter
Contact: Available upon request

---

📚 References

• Product: https://wordpress.org/plugins/trinity-audio/

---

⚠️ License

This advisory is provided for public security awareness. Free to share with attribution.