Rename Media Files <= 1.0.1 - Authenticated (Contributor+) Remote Code Execution

2023-11-2300:00:00

wpscan.com

remote code execution

authenticated

contributor-level access

server vulnerability

wordpress plugin

9.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.4%

JSON

Description The Rename Media Files plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with contributor-level access and above, to execute code on the server.