Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/06 7:17 a.m.•18 views

CVE-2026-94278

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

5.5CVSS0.00215EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 6:00 a.m.•14 views

EUVD-2026-92968

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

5.5CVSS5.7AI score0.00215EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•17 views

PT-2026-106340

Name of the Vulnerable Software and Affected Versions File Media Renamer versions prior to 1.4 Description The File Media Renamer WordPress plugin fails to verify if the requesting user is authorized to modify a specific media attachment. This allows any user with file-upload privileges to rename...

5.5CVSS5.7AI score0.00215EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•10 views

CVE-2026-94278: Improper Access Control

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

5.5CVSS5.7AI score0.00215EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/14 12:15 p.m.•22 views

CVE-2026-2312

The Media Library Folders plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 8.3.6 via the deletemaxgalleriamedia and maxgalleriarenameimage functions due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS0.00236EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/14 11:24 a.m.•31 views

CVE-2026-2312

CVE-2026-2312 affects the WordPress plugin Media Library Folders (

4.3CVSS5.8AI score0.00236EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/14 12:00 a.m.•24 views

WordPress plugin Media Library Folders security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

4.3CVSS5.9AI score0.00236EPSS
SaveExploits0References2
Rows per page
Query Builder