Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
FrenifyMediamatic

4 matches found

CVE
CVE•added 2021/12/13 10:41 a.m.•60 views

CVE-2021-24848

CVE-2021-24848 affects the Mediamatic WordPress plugin prior to 2.8.1. The mediamaticAjaxRenameCategory action accepts categoryID from authenticated users and uses it in a SQL statement without sanitisation, enabling SQL injection. Impact is partial confidentiality/integrity/availability (per CVS...

8.8CVSS8.9AI score0.01318EPSS
Web
CVE
CVE•added 2023/01/13 7:44 p.m.•60 views

CVE-2023-0293

The CVE-2023-0293 entry concerns the WordPress plugin Mediamatic – Media Library Folders . A missing capability check on the plugin’s AJAX actions in versions up to and including 2.8.1 enables an attacker authenticated as a subscriber or higher to bypass authorization and alter image categories u...

4.3CVSS4.4AI score0.00568EPSS
CVE
CVE•added 2023/01/13 7:46 p.m.•56 views

CVE-2023-0294

The Mediamatic – Media Library Folders WordPress plugin (up to version 2.8.1) is affected by a Cross-Site Request Forgery due to missing/incorrect nonce validation on its AJAX actions. An unauthenticated attacker can coerce a site administrator into performing actions that change image categories...

8.8CVSS4.3AI score0.00369EPSS
CVE
CVE•added 2023/05/25 11:42 a.m.•48 views

CVE-2022-47144

CVE-2022-47144 affects Plugincraft Mediamatic – Media Library Folders plugin for WordPress, version

8.8CVSS6.6AI score0.00226EPSS