Trinity Audio – Text to Speech AI audio player to convert content into audio, CVE-2025-9196

CVE, Research URL: CVE-2025-9196
Home page URL: Security reports for Trinity Audio – Text to Speech AI audio player to convert content into audio
Application: Trinity Audio – Text to Speech AI audio player to convert content into audio
Published on: Oct 11, 2025
Research Description: The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on install. This makes it possible for unauthenticated attackers to extract sensitive data including configuration data.
Affected versions: max 5.22.0.
Status: vulnerable

Trinity Audio &#8211; Text to Speech AI audio player to convert content into audio, CVE-2025-9196