plugin

Enhanced Media Library Vulnerabilities

2 known security issues reported for the Enhanced Media Library WordPress plugin. Most recent disclosed May 2, 2024.

1 medium

Running Enhanced Media Library on your site? Check whether your installed version is affected.

Scan your site free

Enhanced Media Library [enhanced-media-library] < 2.8.10

unknown

[en] The Enhanced Media Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload functionality in all versions up to, and including, 2.8.9 due to the plugin allowing 'dfxp' files to be uploaded. This makes it possible for authenticated attackers, with author-level access and above, to...

Affected:
up to 2.8.10
Fixed in:
2.8.10
Disclosed:
May 2, 2024

CVE-2024-2840 on NVD →

Enhanced Media Library <= 2.8.9 - Authenticated (Author+) Stored Cross-Site Scripting

medium

The Enhanced Media Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload functionality in all versions up to, and including, 2.8.9 due to the plugin allowing 'dfxp' files to be uploaded. This makes it possible for authenticated attackers, with author-level access and above, to injec...

CVSS:
5.4
Affected:
up to 2.8.9
Fixed in:
2.8.10
Disclosed:
Apr 15, 2024

CVE-2024-2840 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database