Access violation vulnerability in Croma Music 3.6

The Croma Music plugin for WordPress has a security issue that allows unauthorized changes to be made to the data. This can lead to someone with limited access being able to gain higher privileges and potentially take control of the website. The problem lies in the ‘ironMusic_ajax’ function in all versions up to 3.6, which does not properly check for permissions. This means that someone with at least Subscriber-level access can change important settings on the website, including making themselves an administrator and allowing others to register as users.