plugin

Import Legacy Media Vulnerabilities

1 known security issue reported for the Import Legacy Media WordPress plugin. Most recent disclosed May 25, 2014.

1 medium

Running Import Legacy Media on your site? Check whether your installed version is affected.

Scan your site free

Import Legacy Media <= 0.1 - Cross-Site Scripting

medium

Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.

CVSS:
6.1
Affected:
up to 0.1
Fix:
No patched version reported
Disclosed:
May 25, 2014

CVE-2014-4535 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database