WordPress Plugin Vulnerabilities

Media Library Categories <= 1.1.1 - Cross Site Scripting

Description

The media-library-categories WordPress plugin was affected by a Cross Site Scripting security vulnerability.

Affects Plugins

Plugin icon
media-library-categories
No known fix

References

CVE
CVE-2012-6630
URL
https://packetstormsecurity.com/files/#112697/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
90b8bacf-69d6-4544-98ad-50f3b3f9a673

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2018-02-25
Title
WP Support Plus Responsive Ticket System < 9.0.3 - Multiple Authenticated SQL Injection
Published
2026-05-06
Title
BetterDocs Pro < 3.7.1 - Unauthenticated SQL Injection via Encyclopedia 'limit' Parameter
Published
2026-01-12
Title
DZS Video Gallery < 12.40 - Authenticated (Subscriber+) SQL Injection
Published
2024-02-06
Title
Podlove Subscribe button < 1.3.11 - Authenticated (Contributor+) SQL Injection
Published
2025-08-05
Title
CleverReach WP < 1.5.21 - Unauthenticated SQL Injection via title