Lucene search
K

13 matches found

Patchstack
Patchstack
added 2025/12/11 9:42 a.m.2 views

WordPress Media Library Tools plugin <= 1.6.15 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin Media Library Tools versions = 1.6.15...

9.8CVSS8.1AI score0.00032EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/10 2:23 p.m.1 views

CVE-2025-67520

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tiny Solutions Media Library Tools media-library-tools allows SQL Injection.This issue affects Media Library Tools: from n/a through = 1.6.15...

7.6CVSS7.7AI score0.00032EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.2 views

EUVD-2025-202124

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tiny Solutions Media Library Tools media-library-tools allows SQL Injection.This issue affects Media Library Tools: from n/a through = 1.6.15...

7.1AI score0.00032EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-67520

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tiny Solutions Media Library Tools media-library-tools allows SQL Injection.This issue affects Media Library Tools: from n/a through = 1.6.15...

7.6CVSS0.00032EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:13 p.m.0 views

CVE-2025-67520 WordPress Media Library Tools plugin <= 1.6.15 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tiny Solutions Media Library Tools media-library-tools allows SQL Injection.This issue affects Media Library Tools: from n/a through = 1.6.15...

7.6CVSS7.3AI score0.00032EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 2:13 p.m.10 views

CVE-2025-67520

CVE-2025-67520: WordPress plugin Media Library Tools (media-library-tools)

7.6CVSS7.3AI score0.00032EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 2:13 p.m.17 views

CVE-2025-67520 WordPress Media Library Tools plugin <= 1.6.15 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tiny Solutions Media Library Tools media-library-tools allows SQL Injection.This issue affects Media Library Tools: from n/a through = 1.6.15...

7.6CVSS0.00032EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.2 views

WordPress plugin Media Library Tools SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection...

7.6CVSS7.8AI score0.00032EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.1 views

PT-2025-49896

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tiny Solutions Media Library Tools media-library-tools allows SQL Injection.This issue affects Media Library Tools: from n/a through = 1.6.15...

9.8CVSS7.7AI score0.00032EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/11/21 10:34 p.m.2 views

WordPress Media Library Tools plugin < 1.5.0 - Author+ Stored XSS via SVG vulnerability

Author+ Stored XSS via SVG vulnerability discovered by Bob Matyas in WordPress Plugin Media Library Tools versions 1.5.0...

5.4CVSS6AI score0.00176EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/21 6:0 a.m.10 views

CVE-2024-10482 Media Library Tools < 1.5.0 - Author+ Stored XSS via SVG

The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

6AI score0.00176EPSS
Exploits1References1
CVE
CVE
added 2024/11/21 6:0 a.m.49 views

CVE-2024-10482

CVE-2024-10482 affects the WordPress plugin Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO (Media Library Tools). Prior to version 1.5.0, it failed to sanitize uploaded SVG files, allowing stored cross-site scripting (XSS) payloads by users with as little as Author...

5.4CVSS5.3AI score0.00176EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/11/21 6:0 a.m.23 views

CVE-2024-10482 Media Library Tools < 1.5.0 - Author+ Stored XSS via SVG

The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

0.00176EPSS
Exploits1References1
Rows per page
Query Builder