1353 matches found
CVE-2025-46587: Incorrect Default Permissions
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-58252: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an information disclosure vulnerability that stems from insufficient protection of information in the media library module, which affects service confidentiality. No details of the vulnerability...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an Improper Privilege Control vulnerability that stems from improper privilege control of the Media Library module, which affects service confidentiality. No details of the vulnerability are...
PT-2025-19974 · Huawei · Harmonyos
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A permission control issue exists in the media library module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the moment, there is no informati...
CVE-2025-46519
Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...
CVE-2025-46519
Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...
CVE-2025-46519 WordPress Media Library Downloader plugin <= 1.3.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...
CVE-2025-46519 WordPress Media Library Downloader plugin <= 1.3.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...
CVE-2025-46519
CVE-2025-46519 concerns WordPress Media Library Downloader <= 1.3.1 with Missing Authorization due to misconfigured access controls. Public sources (NVD patch entry, PatchStack, and Red Hat/CVE listings) corroborate a vulnerability enabling unauthorized access across the plugin, affecting vers...
PT-2025-17823 · Unknown · Media Library Downloader
Name of the Vulnerable Software and Affected Versions: Media Library Downloader versions 1.3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Media Library...
WordPress plugin Media Library Downloader 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-46519: Missing Authorization
Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...
Kentico Xperience cross-site scripting vulnerability (CNVD-2026-05132)
Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability that can be exploited by an attacker to allow an authenticated user to distribute malicious content via specific interactions with the media library file upload...
CVE-2025-32369
Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content for stored XSS via certain interactions with the media library file upload feature...
Cross-site Scripting (XSS)
Overview Kentico.Xperience.Libraries is a package for libraries and applications that use Kentico Xperience API. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the media library file upload feature. An attacker can distribute malicious content by uploading...
CVE-2025-32369
Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content for stored XSS via certain interactions with the media library file upload feature...
CVE-2025-32369
Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content for stored XSS via certain interactions with the media library file upload feature...
PT-2025-15088 · Kentico · Kentico Xperience
Name of the Vulnerable Software and Affected Versions: Kentico Xperience versions prior to 13.0.181 Description: The issue allows authenticated users to distribute malicious content via certain interactions with the media library file upload feature, potentially leading to stored cross-site...