6 matches found
CVE-2026-89141
CVE-2026-89141 affects the AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin in all versions up to and including 3.7.7 . The vulnerability is an Insecure Direct Object Reference (IDOR) via the mediaId parameter, caused by missing validation on a user-controlled key. Authenticated a...
WordPress AI Engine plugin <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter vulnerability
Insecure Direct Object Reference to Authenticated Subscriber+ Sensitive Attachment Disclosure via 'mediaId' Parameter vulnerability discovered by Chi Trung Huynh - Duy Tan Universiy in WordPress Plugin AI Engine versions = 3.7.7...
Smanga 安全漏洞
Smanga is a Docker-based comic streaming reading tool developed by lkw199711. Version 3.2.7 of Smanga has a security vulnerability. This vulnerability stems from improper handling of the mediaId parameter in the /php/path/rescan.php interface. It could allow unverified attackers to inject operati...
EUVD-2014-4515
Malware in sbrugna...
Cross site scripting
Cross-site scripting XSS vulnerability in tpls/editmedia.php in the Hot Files: File Sharing and Download Manager wphotfiles plugin 1.0.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mediaid parameter...