Plugin icon

MediaPress

mediapress

Vulnerabilities:

3

Last Updated:

December 31, 2025

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-01-07
Title
MediaPress < 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.3
CVSS
6.4 (medium)
Published
2026-01-05
Title
MediaPress < 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode
Fixed in
Fixed in 1.6.2
CVSS
6.4 (medium)
Published
2025-09-03
Title
MediaPress < 1.6.0 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 1.6.0
CVSS
8.8 (high)