WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
media-file-organizer
Published
2021-04-13
Title
Media File Organizer <= 1.0.1 - Directory Traversal
Slug
media-file-renamer
Published
2014-01-31
Title
Media File Renamer < 2.2.2 - Stored Cross-Site Scripting (XSS)
Slug
media-file-renamer
Published
2021-09-04
Title
Media File Renamer - Auto & Manual Rename < 5.2.7 - Media Title/Filename/Locking State Update via CSRF
Slug
media-file-renamer
Published
2023-11-28
Title
Media File Renamer < 5.7.0 - Sensitive Information Exposure via Log File
Slug
media-file-renamer
Published
2023-12-26
Title
Media File Renamer < 5.7.8 - Admin+ Remote Code Execution
Slug
media-folder
Published
2025-07-07
Title
Media Folder <= 1.0.0 - Reflected Cross-Site Scripting
Slug
media-from-ftp
Published
2018-01-08
Title
Media from FTP <= 9.84 - Authenticated Directory Traversal
Slug
media-from-ftp
Published
2023-08-14
Title
Media from FTP < 11.17 - Author+ Arbitrary File Access
Slug
media-hygiene
Published
2024-07-08
Title
Media Hygiene < 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
Slug
media-hygiene
Published
2025-05-07
Title
Media Hygiene < 4.0.1 - Missing Authorization
Slug
media-hygiene
Published
2025-06-19
Title
Media Hygiene < 4.0.3 - Missing Authorization
Slug
media-library-alt-text-editor
Published
2026-03-06
Title
Media Library Alt Text Editor <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_id' Shortcode Attribute
Slug
media-library-assistant
Published
2018-06-18
Title
Media Library Assistant < 2.7.4 - Cross-Site Scripting (XSS)
Slug
media-library-assistant
Published
2020-04-13
Title
Media Library Assistant < 2.82 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
media-library-assistant
Published
2020-04-13
Title
Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion
Slug
media-library-assistant
Published
2020-04-19
Title
Media Library Assistant < 2.82 - Authenticated RCE
Slug
media-library-assistant
Published
2020-11-24
Title
Media Library Assistant < 2.90 - Authenticated Blind SQL Injection
Slug
media-library-assistant
Published
2022-09-29
Title
Media Library Assistant < 3.01 - Unauthenticated Error Log Access
Slug
media-library-assistant
Published
2023-02-16
Title
Media Library Assistant < 3.06 - Admin+ SQLi
Slug
media-library-assistant
Published
2023-07-12
Title
Media Library Assistant < 3.08 - Reflected Cross-Site Scripting
Slug
media-library-assistant
Published
2023-09-05
Title
Media Library Assistant < 3.10 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution
Slug
media-library-assistant
Published
2023-09-21
Title
Media Library Assistant < 3.11 - Contributor+ Stored XSS
Slug
media-library-assistant
Published
2023-10-17
Title
Media Library Assistant < 3.12 - Author+ Stored XSS
Slug
media-library-assistant
Published
2024-03-25
Title
Media Library Assistant < 3.14 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
media-library-assistant
Published
2024-03-28
Title
Media Library Assistant < 3.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode